5 ms·
> The problem is common and well-known, but hard to prevent and does not have any mitigations built in to the AWS platform. Does anyone know if this is fixed b
by Omnipresent 4y ago
> The problem is common and well-known, but hard to prevent and does not have any mitigations built in to the AWS platform.
Does anyone know if this is fixed by AWS now?
- thedougd 4y agoIMDSv2 with tokens required is the fix: https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/configuring-instance-metadata-service.html https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/configur...
- zsims 4y agoPartial mitigation. It's not SSRF "proof" but I suppose nothing really is.
- deleted 4y ago[deleted]