Vulnerabilities
Misconfiguration
Runtime Security
Compliance
Oracle > Compute >

Legacy Metadata Endpoint Disabled

MEDIUM
Source
CloudSploit
ID
legacy-metadata-endpoint-disabled
management console

Legacy Metadata Endpoint Disabled

Ensure that compute instances are configured with Legacy MetaData service (IMDSv1) endpoints disabled.

For best security practices, it is recommended that the compute instances should be configured with legacy v1 endpoints (Instance Metadata Service v1) disabled, and use Instance Metadata Service v2 instead.

Ensure all compute instances are configured to use IMDSv2.

Aqua Security is the largest pure-play cloud native security company, providing customers the freedom to innovate and run their businesses with minimal friction. The Aqua Cloud Native Security Platform provides prevention, detection, and response automation across the entire application lifecycle to secure the build, secure cloud infrastructure and secure running workloads wherever they are deployed.
Copyright © 2024 Aqua Security Software Ltd.   Privacy Policy | Terms of Use