AWS AWSEC2 documentation change
Summary
Updated references from 'Instance Metadata Defaults' tab to 'Instance Metadata' tab in declarative policy examples
Security assessment
The change corrects documentation links for IMDSv2 enforcement policies but does not address a specific vulnerability. IMDSv2 enforcement improves security by requiring session tokens, but this change only updates example policy references.
Diff
diff --git a/AWSEC2/latest/UserGuide/instance-metadata-transition-to-version-2.md b/AWSEC2/latest/UserGuide/instance-metadata-transition-to-version-2.md index aff0d509f..33f5d78ed 100644 --- a//AWSEC2/latest/UserGuide/instance-metadata-transition-to-version-2.md +++ b//AWSEC2/latest/UserGuide/instance-metadata-transition-to-version-2.md @@ -121 +121 @@ For example IAM policies, see [Work with instance metadata](./ExamplePolicies_EC -Use Declarative Policies (a feature of AWS Organizations) to centrally set IMDS account defaults, including IMDSv2 enforcement, across your organization. For an example policy, see the **Instance Metadata Defaults** tab in the [Supported declarative policies](https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_declarative_syntax.html#declarative-policy-examples) section in the _AWS Organizations User Guide_. +Use Declarative Policies (a feature of AWS Organizations) to centrally set IMDS account defaults, including IMDSv2 enforcement, across your organization. For an example policy, see the **Instance Metadata** tab in the [Supported declarative policies](https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_declarative_syntax.html#declarative-policy-examples) section in the _AWS Organizations User Guide_. @@ -270 +270 @@ For more information, see [Set IMDSv2 as the default for the account](./configur -Use a Declarative Policy to set the organization default for IMDSv2 to required. For an example policy, see the **Instance Metadata Defaults** tab in the [Supported declarative policies](https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_declarative_syntax.html#declarative-policy-examples) section in the _AWS Organizations User Guide_. +Use a Declarative Policy to set the organization default for IMDSv2 to required. For an example policy, see the **Instance Metadata** tab in the [Supported declarative policies](https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_declarative_syntax.html#declarative-policy-examples) section in the _AWS Organizations User Guide_. @@ -283 +283 @@ Use one of the following options to enforce IMDSv2: -You can enforce the use of IMDSv2 at the account level for each AWS Region. When enforced, instances can only launch if they're configured to require IMDSv2. This enforcement applies regardless of how the instance or AMI is configured. For more information, see [Enforce IMDSv2 at the account level](./configuring-IMDS-new-instances.html#enforce-imdsv2-at-the-account-level). To apply this setting at an organization level, set a Declarative Policy. For an example policy, see the **Instance Metadata Defaults** tab in the [Supported declarative policies](https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_declarative_syntax.html#declarative-policy-examples) section in the _AWS Organizations User Guide_. +You can enforce the use of IMDSv2 at the account level for each AWS Region. When enforced, instances can only launch if they're configured to require IMDSv2. This enforcement applies regardless of how the instance or AMI is configured. For more information, see [Enforce IMDSv2 at the account level](./configuring-IMDS-new-instances.html#enforce-imdsv2-at-the-account-level). To apply this setting at an organization level, set a Declarative Policy. For an example policy, see the **Instance Metadata** tab in the [Supported declarative policies](https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_declarative_syntax.html#declarative-policy-examples) section in the _AWS Organizations User Guide_.