aws_cdk.aws_ec2 NatInstanceProvider: missing require_imdsv2
- Dominant language
- TypeScript
- Stars
- 12.9k
- Forks
- 4.6k
- Avg merge
- 2d 3h
- Merged PRs (30d)
- 83
Description
### Describe the feature
Can we get the require_imdsv2 parameter added to the aws_cdk.aws_ec2 NatInstanceProvider resource?
This was resolved for EC2 and ASG here: Support setting EC2 instance metadata to require token (IMDSv2) #5137
#16051
#16052
### Use Case
The AWS Foundational Security Best Practices v1.0.0 for Security Hub will produce a finding for the NAT instances under EC2.8: EC2 instances should use Instance Metadata Service Version 2 (IMDSv2)
### Proposed Solution
_No response_
### Other Information
_No response_
### Acknowledgements
- [ ] I may be able to implement this feature request
- [ ] This feature might incur a breaking change
### CDK version used
2.61.1 (build d319d9c)
### Environment details (OS name and version, etc.)
WSL: Ubuntu 20.04.5 LTS (Focal Fossa)
Contributor guide
Research direction
The issue concerns NatInstanceProvider in aws_cdk.aws_ec2; compare the earlier EC2 and ASG implementation referenced by #5137. Trace that provider’s existing configuration and tests, then verify require_imdsv2 can be supplied and produces the intended IMDSv2 setting for NAT instances.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- aws, typescript
- Domain
- cloud, infrastructure
- Issue type
- Feature
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 38/100