cli53 icon indicating copy to clipboard operation
cli53 copied to clipboard

Published 20 hours ago • verified publisher icon barnybug

Lacking IMDSv2 support

Open phils opened this issue 5 years ago • 1 comments

Issue type

  • Bug report

cli53 version (cli53 --version)

0.8.16

OS / Platform

Linux x64

Steps to reproduce

any cli53 command that does an AWS API call

Expected behaviour

IMDSv2 metadata service used

Actual behaviour

IMDSv1 metadata service used

Could you contribute a fix or help testing with this issue?

Fix is probably as simple as updating the AWS Go SDK to at least version v1.25.38 where support was added in November 2019.

Further background on IMDSv2: https://aws.amazon.com/blogs/security/defense-in-depth-open-firewalls-reverse-proxies-ssrf-vulnerabilities-ec2-instance-metadata-service/

phils avatar Feb 15 '20 05:02 phils

Please try the 0.8.17 release.

barnybug avatar Mar 08 '20 08:03 barnybug