EC2 instance has no metadata options block — IMDSv2 not configured

What it checks

EC2 instance has no metadata options block — IMDSv2 not configured

Where it applies

Terraform: aws_instance, aws_launch_template

CloudFormation: AWS::EC2::Instance, AWS::EC2::LaunchTemplate

How to fix it

1. Add a metadata_options block with http_tokens = "required" to the aws_instance resource. Most AWS SDKs support IMDSv2 by default.

Frameworks

• AWS FSBP EC2.8

These mappings are advisory, not an attestation of compliance.

Vendor documentation

All rules