IMDSv2 Suport on AWS and Immuta
Immuta only currently support the legacy version of IMDS (v1). Due to migrations occurring, this can break the backup process as Immuta cannot utilize IMDSv2 at the moment to securely access metadata via session-oriented authentication (i.e. IMDSv2 is protected by a session token that is being obtained using instance credentials, making it much more secure).
In order to remedy this issue, please run the following line in the affected aws ec2 instance:
aws ec2 modify-instance-metadata-options --instance-id ${i} --http-tokens required --http-endpoint enabled --http-put-response-hop-limit 2
Upon running the above and re-triggering the backup job, you can confirm that things are now working as expected.
It is worth noting that both versions can co-exist with one another to avoid any potential issues until Immuta fully supports v2.
Last updated