From 5f5418baf1d9011da7b8c120cca9869c1fb4e2ec Mon Sep 17 00:00:00 2001
From: "Joshua C. Forest" <josh.forest@posit.co>
Date: Thu, 31 Aug 2023 10:57:41 -0400
Subject: [PATCH] Encrypt the ebs and use IMDSv2, with the hop limit of 2 since
 ECS

---
 serverless-resources.yml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/serverless-resources.yml b/serverless-resources.yml
index 9e8f6db..8766957 100644
--- a/serverless-resources.yml
+++ b/serverless-resources.yml
@@ -84,6 +84,10 @@ rBuildsEcsLaunchTemplate:
           Ebs:
             VolumeType: gp3
             VolumeSize: 96
+            Encrypted: true
+      MetadataOptions:
+        HttpTokens: required
+        HttpPutResponseHopLimit: 2
 
 rBuildsBatchComputeEnvironment:
   Type: AWS::Batch::ComputeEnvironment