My Saved Presets
You must be logged in to view saved presets

Loading Library ...

Require the Use of IMDSv2 When Launching EC2 Instances

An IAM policy that prevents users from launching new EC2 Instances if they are not configured to use the new Instance Metadata Service (IMDSv2)

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Action": [
                "ec2:RunInstances"
            ],
            "Resource": [
                "arn:aws:ec2:*:*:instance/*"
            ],
            "Effect": "Deny",
            "Condition": {
                "StringNotEquals": {
                    "ec2:MetadataHttpTokens": "required"
                }
            }
        }
    ]
}

Actions



Customize Template

No policy variables to customize
* Required field

© 2024 asecurecloud. All rights reserved.