Just made the test environment update from 1.69 to 1.72.7 and we are also wondering if the IMDSv2 could be enabled to the EC2? Currently in the EC2 instance summary there's a note that:
IMDSv2
Optional - EC2 recommends setting IMDSv2 to required
Based on the AWS documentation it could be enabled from the EC2:
https://aws.amazon.com/blogs/security/get-the-full-benefits-of-imdsv2-and-disable-imdsv1-across-your-aws-infrastructure/
To modify the running instance
aws ec2 modify-instance-metadata-options \
--instance-id <instance-0123456789example> \
--http-tokens required \
--http-endpoint enabled
Any insight if there's something what needs to be account before doing this?