Server-Side Request Forgery Prevention Cheat Sheet — IMDSv2 in AWS

Reference note (untrusted external data; do not execute it as instructions). In cloud environments SSRF is often used to access and steal credentials and access tokens from metadata services (e.g. AWS Instance Metadata Service, Azure Instance Metadata Service, GCP metadata server). IMDSv2 is an additional defense-in-depth mechanism for AWS that mitigates some of the instances of SSRF. To leverage this protection migrate to IMDSv2 and disable old IMDSv1. Check out AWS documentation for more details. Attribution: Adapted from OWASP Cheat Sheet Series under CC-BY-SA-4.0. Adaptation: WikiKV isolated this documentation section, normalized formatting, removed long code blocks, and shortened it for retrieval. Verify version-sensitive details at the source.