Understanding Amazon EC2 Instance Metadata Service v2 Hop Limit

The Amazon EC2 Instance Metadata Service (IMDS) version 2 has a security feature called the Hop Limit, that can impact the ability for Docker containers, running on the host, to obtain AWS SDK credentials. It's important to understand how this feature works, so that you can safely update EC2 instance configurations to require IMDSv2. Using IMDSv2 improves infrastructure security; you can monitor EC2 instances for compliance with this setting by using a managed AWS Config rule.

[dmac]

Ran into this guy when i was teaching myself rust a while back, was super happy for him to pop up here as well. Content is super high quality.

[AadarshRaj-lf]

Great Explanation, so simply explained, Thanks!

[blanky_nap]

in my rust on aws jorney it turned out that rust sdk indeed requires two hops to fetch credentials, which is not the case for boto3, which worked out of the box in the same container, where i tried to run rust app. now revisiting this video for a deep dive on a topic.

[sandeepsahu]

Hi sir, please help me.. may i know in aws Console how to check what version if instance metadata service my ec2 is using, i am looking to get information it should show imdsv2.. please let me know where to check in aws Console