chore: Enforce IMDSv2 (#45)

skyscrapers · Sep 10, 2024 · 1f36633 · 1f36633
1 parent dd3990b
commit 1f36633
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/teleport-server/instance.tf b/teleport-server/instance.tf
@@ -17,6 +17,12 @@ resource "aws_instance" "teleport_instance" {
     encrypted             = var.root_vl_encrypted
   }
 
+  metadata_options {
+    http_endpoint               = "enabled"
+    http_tokens                 = "required"
+    http_put_response_hop_limit = 1
+  }
+
   tags = {
     Name        = "teleport-${var.project}-${var.environment}"
     Stack       = "teleport"