Ravi Sir's Cyber Security Cards › Interview Cards
What is IMDSv2 and why prefer it?
What is IMDSv2 and why prefer it? IMDSv2 is the safer version of the EC2 metadata service. It needs a session token, which makes credential theft harder. With old IMDSv1, an SSRF bug could grab the instance’s role credentials in one request. IMDSv2 blocks that easy grab. “I require IMDSv2 and set a
Read card text
What this card says
Short answer
IMDSv2 is the safer version of the EC2 metadata service. It needs a session token, which makes credential theft harder.
Example
With old IMDSv1, an SSRF bug could grab the instance’s role credentials in one request. IMDSv2 blocks that easy grab.
Say it in the interview
“I require IMDSv2 and set a low hop limit when I harden EC2.”
Why it matters
It closes a common path from a web bug to stolen cloud credentials.
Learn more in the lesson: 46.6 AWS Cloud Security Interview Questions