How to keep web host secure

Question

Hi, so i want to host an web app that is using php on apache server and i will put all this things on an ec2 with ubuntu. The question is: i have a vpc,subnet,security group made by my company and the web app should only be accessible via VPN but when i create the ec2 instance and after i assign public ipv4 adress i receive this error

 EC2.8 EC2 instances should use Instance Metadata Service Version 2 (IMDSv2)

Should i create another subnet and security group?

```
 EC2.8 EC2 instances should use Instance Metadata Service Version 2 (IMDSv2) 
```

Should i create another subnet and security group?

Answer

This message isn't related to subnets or security groups, but is about the instance metadata settings chosen when the EC2 instance is provisioned.

It's telling you that you should pick version 2, for details see https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/configuring-IMDS-new-instances.html

Answer

If you want to modify the Metadata Option for your current instance, please follow these instructions : https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/configuring-IMDS-existing-instances.html

Else if you want to make sure that new instances are using version 2 , refer to the response posted by RWC.

How to keep web host secure

Relevant content