aws / aws/aws-cdk

aws_cdk.aws_ec2 NatInstanceProvider: missing require_imdsv2

Open
#23,803 2 comments 1 reaction 0 assignees View on GitHub
@aws-cdk/aws-ec2 effort/small feature-request p2
Dominant language
TypeScript
Stars
12.9k
Forks
4.6k
Avg merge
2d 3h
Merged PRs (30d)
83

Description

### Describe the feature

Can we get the require_imdsv2 parameter added to the aws_cdk.aws_ec2 NatInstanceProvider resource?
This was resolved for EC2 and ASG here: Support setting EC2 instance metadata to require token (IMDSv2) #5137

#16051
#16052

### Use Case

The AWS Foundational Security Best Practices v1.0.0 for Security Hub will produce a finding for the NAT instances under EC2.8: EC2 instances should use Instance Metadata Service Version 2 (IMDSv2)

### Proposed Solution

_No response_

### Other Information

_No response_

### Acknowledgements

- [ ] I may be able to implement this feature request
- [ ] This feature might incur a breaking change

### CDK version used

2.61.1 (build d319d9c)

### Environment details (OS name and version, etc.)

WSL: Ubuntu 20.04.5 LTS (Focal Fossa)

Contributor guide

Open the contributing guide

Research direction

The issue concerns NatInstanceProvider in aws_cdk.aws_ec2; compare the earlier EC2 and ASG implementation referenced by #5137. Trace that provider’s existing configuration and tests, then verify require_imdsv2 can be supplied and produces the intended IMDSv2 setting for NAT instances.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws, typescript
Domain
cloud, infrastructure
Issue type
Feature
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
38/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.