NEW Amazon Linux AMI - IMDSv2 as default

Question

Hello Team,

In New Amazon Linux AMI AMI ID ami-02f3f602d23f1659d (al2023-ami-2023.0.20230315.0-kernel-6.1-x86_64), which they launched on 15th March,2023 the Instance Metadata Service comes with version 2 by default where HttpTokens is mandatory. 
Direct curl http://169.254.169.254/latest/meta-data/instance-id command won’t work here.
For IMDSv2, we have fetch the data through token authentication right.

For reference
https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/instancedata-data-retrieval.html

My question is
For the  new AMI, I am seeing that by default it comes up with the Instance Metadata Service version as 2. Could you please confirm me that hereafter the NEW AMI released from Amazon will it be having the IMDS version with default version as 2?

Answer

Hello

By default Amazon Linux 2023 uses IMDS-v2. However you can override this setting during launch or modify it later after the instance is launched as described [here](	
i-09f3296778c14773f).

Hope this helps.

NEW Amazon Linux AMI - IMDSv2 as default

Contenuto pertinente