Restricting access to the IMDS and Amazon EC2 instance profile credentials

[ib-ak]

Have a question? Please checkout our Slack Community or visit our Slack Archive.

Describe the Feature

Restricting access to the IMDS and Amazon EC2 instance profile credentials

Expected Behavior

There should be an option to disable IMDS for node groups

Use Case

Amazon EKS security best practices
https://docs.aws.amazon.com/eks/latest/userguide/best-practices-security.html

Describe Ideal Solution

Managed nodes with a custom launch template
Set the following settings in the launch template's Advanced details:

Metadata accessible – Enabled
Metadata version – V2 only (token required)
Metadata response hop limit – 1

Alternatives Considered

None

Additional Context

Add any other context or screenshots about the feature request here.