Transition to IMDSv2 on EC2 – Introduction, Preparation, Pitfalls

Transition to IMDSv2 on EC2

IMDSv2 can improve EC2 security. For a couple of weeks, AWS Foundational Security Best Practices recommends that EC2 instances use IMDSv2 (control EC2.8).

[wpcc-element _tag=”source” type=”image/webp” srcset=”/images/2020/11/imdsv2@730w.webp 730w, /images/2020/11/imdsv2@730w2x.webp 1460w, /images/2020/11/imdsv2@610w.webp 610w, /images/2020/11/imdsv2@610w2x.webp 1220w, /images/2020/11/imdsv2@450w.webp 450w, /images/2020/11/imdsv2@450w2x.webp 900w, /images/2020/11/imdsv2@330w.webp 330w, /images/2020/11/imdsv2@330w2x.webp 660w, /images/2020/11/imdsv2@545w.webp 545w, /images/2020/11/imdsv2@545w2x.webp 1090w” sizes=”(min-width: 1200px) 730px, (min-width: 992px) 610px, (min-width: 768px) 450px, (min-width: 576px) 330px, 545px” _close=”0″]

This video explains why IMDSv2 is useful and what attacks it protects you against, including a live demo. I also highlight a pitfall with Docker containers in a demo. Last but not least, I show you the preparation steps for a smooth transition.

[wpcc-iframe class=”embed-responsive-item lozad” data-src=”https://www.youtube-nocookie.com/embed/bi3bIs92xE0″ allow=”accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture” allowfullscreen=””]