Hacker News new | ask | show | jobs
by thedougd 1461 days ago
IMDSv2 with tokens required is the fix:

https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/configur...

1 comments

Partial mitigation. It's not SSRF "proof" but I suppose nothing really is.