AWS Security ChangesHomeSearch

AWS AWSEC2 documentation change

Service: AWSEC2 · 2025-07-04 · Documentation low

File: AWSEC2/latest/UserGuide/verify-iid.md

Summary

Corrected PowerShell examples: Added explicit -Uri parameters and fixed command syntax for IMDSv2 token usage.

Security assessment

These are documentation formatting improvements for command examples. No security vulnerabilities are addressed, though proper syntax helps prevent misconfiguration errors when implementing IMDSv2 security practices.

Diff

diff --git a/AWSEC2/latest/UserGuide/verify-iid.md b/AWSEC2/latest/UserGuide/verify-iid.md
index b670c7864..7656b6a23 100644
--- a//AWSEC2/latest/UserGuide/verify-iid.md
+++ b//AWSEC2/latest/UserGuide/verify-iid.md
@@ -101 +101 @@ IMDSv2
-        PS C:\> [string]$token = (Invoke-WebRequest -Method Put -Headers @{'X-aws-ec2-metadata-token-ttl-seconds' = '21600'} http://169.254.169.254/latest/api/token).Content
+        PS C:\> [string]$token = (Invoke-WebRequest -Method Put -Headers @{'X-aws-ec2-metadata-token-ttl-seconds' = '21600'} -Uri http://169.254.169.254/latest/api/token).Content
@@ -103 +103 @@ IMDSv2
-        PS C:\> $Signature = [Convert]::FromBase64String((Invoke-WebRequest -Headers @{'X-aws-ec2-metadata-token' = $Token} http://169.254.169.254/latest/dynamic/instance-identity/pkcs7).Content)
+        PS C:\> $Signature = [Convert]::FromBase64String((Invoke-WebRequest -Headers @{'X-aws-ec2-metadata-token' = $Token} -Uri http://169.254.169.254/latest/dynamic/instance-identity/pkcs7).Content)
@@ -108 +108 @@ IMDSv1
-        PS C:\> $Signature = [Convert]::FromBase64String((Invoke-WebRequest http://169.254.169.254/latest/dynamic/instance-identity/pkcs7).Content)
+        PS C:\> $Signature = [Convert]::FromBase64String((Invoke-WebRequest -Uri http://169.254.169.254/latest/dynamic/instance-identity/pkcs7).Content)
@@ -115 +115 @@ IMDSv2
-        PS C:\> $Document = [Text.Encoding]::UTF8.GetBytes((Invoke-WebRequest -Headers @{'X-aws-ec2-metadata-token' = $Token} http://169.254.169.254/latest/dynamic/instance-identity/document).Content)
+        PS C:\> $Document = [Text.Encoding]::UTF8.GetBytes((Invoke-WebRequest -Headers @{'X-aws-ec2-metadata-token' = $Token} -Uri http://169.254.169.254/latest/dynamic/instance-identity/document).Content)