Encrypt the ebs and use IMDSv2, with the hop limit of 2 since ECS

2023-08-31 10:57:41 -04:00 · 2023-08-31 10:57:41 -04:00 · 5f5418baf1
commit 5f5418baf1
parent 5f9777270c
1 changed files with 4 additions and 0 deletions
--- a/serverless-resources.yml
+++ b/serverless-resources.yml
@ -84,6 +84,10 @@ rBuildsEcsLaunchTemplate:
          Ebs:
            VolumeType: gp3
            VolumeSize: 96
+            Encrypted: true
+      MetadataOptions:
+        HttpTokens: required
+        HttpPutResponseHopLimit: 2

 rBuildsBatchComputeEnvironment:
  Type: AWS::Batch::ComputeEnvironment