Attack in progressA leaked CI key of ‹ci-deploy-bot› is being used to break in: 6 accounts and machines created.Open the case
IMDS setup slice V-013a
Checks that instances and account defaults require the newer instance metadata service with a hop limit of one.
Checks
| Checks | Needs |
|---|---|
| Checks that instances and account defaults require the newer instance metadata service with a hop limit of one. | ec2 instance, ec2 imds defaults, eks nodegroup |
Coverage
Read everywhere
‹payments-prod-cluster› | |
|---|---|
‹prod-acct› 123456789012 | Read |
Run history
No run has recorded this rule yet.
Findings
1 open finding See them grouped
What it fed
Techniques
T1552.005
How to fix
DescribePolicy / GetInstanceMetadataDefaults / DescribeInstances(MetadataOptions) → set the org policy or IMDS defaults by IaC; reversible