BSidesSF 2022 - Metabadger: Automating IMDS Protection at Scale in AWS (Ashish Patel)

Ashish Patel - Metabadger: Automating IMDS Protection at Scale in AWS

Metabadger is an open source tool that we built at Salesforce that can help you rapidly and safely upgrade your EC2 instances to use IMDSv2 and prevent SSRF-based theft of EC2 Metadata Credentials. In this talk, we'll walk through how we approached and automated this problem to prevent IMDS abuse.

Sched: https://bsidessf2022.sched.com/event/rjrI/metabadger-automating-imds-protection-at-scale-in-aws

aws imds protection scale