aws / aws/aws-toolkit-visual-studio

Publish to Elastic Beanstalk should expose IMDSv1 parameter

Open
#359 1 comment 0 reactions 0 assignees View on GitHub
feature-request
Dominant language
No language data
Stars
135
Forks
37
PR merge metrics
No merged PRs in 30d

Description

IMDSv1 has been superseded by IMDSv2 and AWS is suggesting to upgrade to it everywhere, since IMDSv2 is inherently more secure. I noticed that when publishing applications with AWS Toolkit to Elastic Beanstalk, the EC2 instances have the IMDSv1 property activated.

Deploying a workload with a possible insecure setting should be avoided whenever possible, especially for a tool such as AWS Toolkit that is thought hide complexities and details that aren't needed for a developer that is approaching to AWS for the first time. For this reason I suggest to set IMDSv1 as disabled by default and expose the parameter in the configuration in the publish wizard.

Optionally, I would also add a link to AWS documentation that explains what IMDS is in general and why IMDSv1 should be disabled.

Contributor guide

Open the contributing guide

Research direction

Start by tracing the Elastic Beanstalk publish wizard and how it configures EC2 instance metadata settings, then consult the AWS documentation on IMDSv1 and IMDSv2. Done means IMDSv1 is disabled by default, the publish configuration exposes the parameter, and the proposed explanatory documentation link is included if supported.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws
Domain
cloud
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.