AWS AWSEC2 documentation change
Summary
Corrected PowerShell examples: Added explicit -Uri parameters and fixed command syntax for IMDSv2 token usage.
Security assessment
These are documentation formatting improvements for command examples. No security vulnerabilities are addressed, though proper syntax helps prevent misconfiguration errors when implementing IMDSv2 security practices.
Diff
diff --git a/AWSEC2/latest/UserGuide/verify-iid.md b/AWSEC2/latest/UserGuide/verify-iid.md index b670c7864..7656b6a23 100644 --- a//AWSEC2/latest/UserGuide/verify-iid.md +++ b//AWSEC2/latest/UserGuide/verify-iid.md @@ -101 +101 @@ IMDSv2 - PS C:\> [string]$token = (Invoke-WebRequest -Method Put -Headers @{'X-aws-ec2-metadata-token-ttl-seconds' = '21600'} http://169.254.169.254/latest/api/token).Content + PS C:\> [string]$token = (Invoke-WebRequest -Method Put -Headers @{'X-aws-ec2-metadata-token-ttl-seconds' = '21600'} -Uri http://169.254.169.254/latest/api/token).Content @@ -103 +103 @@ IMDSv2 - PS C:\> $Signature = [Convert]::FromBase64String((Invoke-WebRequest -Headers @{'X-aws-ec2-metadata-token' = $Token} http://169.254.169.254/latest/dynamic/instance-identity/pkcs7).Content) + PS C:\> $Signature = [Convert]::FromBase64String((Invoke-WebRequest -Headers @{'X-aws-ec2-metadata-token' = $Token} -Uri http://169.254.169.254/latest/dynamic/instance-identity/pkcs7).Content) @@ -108 +108 @@ IMDSv1 - PS C:\> $Signature = [Convert]::FromBase64String((Invoke-WebRequest http://169.254.169.254/latest/dynamic/instance-identity/pkcs7).Content) + PS C:\> $Signature = [Convert]::FromBase64String((Invoke-WebRequest -Uri http://169.254.169.254/latest/dynamic/instance-identity/pkcs7).Content) @@ -115 +115 @@ IMDSv2 - PS C:\> $Document = [Text.Encoding]::UTF8.GetBytes((Invoke-WebRequest -Headers @{'X-aws-ec2-metadata-token' = $Token} http://169.254.169.254/latest/dynamic/instance-identity/document).Content) + PS C:\> $Document = [Text.Encoding]::UTF8.GetBytes((Invoke-WebRequest -Headers @{'X-aws-ec2-metadata-token' = $Token} -Uri http://169.254.169.254/latest/dynamic/instance-identity/document).Content)