diff --git a/rule-packs/aws-config.json b/rule-packs/aws-config.json index a9e8299..cc711ef 100644 --- a/rule-packs/aws-config.json +++ b/rule-packs/aws-config.json @@ -1110,5 +1110,17 @@ } ], "alertLevel": "MEDIUM" + }, + { + "name": "ec2-imdsv2-optional", + "description": "Checks if an Amazon EC2 Instance have been configured to not require Instance Metadata Service Version 2 (IMDSv2)", + "queries": [ + { + "name": "query0", + "query": "find aws_instance with httpTokens = 'optional' and httpEndpointEnabled=true", + "version": "v1" + } + ], + "alertLevel": "MEDIUM" } ]