Metabadger - Automating IMDS Protection at Scale in AWS

Metabadger - Automating IMDS Protection at Scale in AWS

Explore an innovative open-source tool called Metabadger in this 13-minute conference talk from BSidesSF 2022. Learn how Salesforce developed this solution to automate the upgrade of EC2 instances to IMDSv2, enhancing protection against SSRF-based theft of EC2 Metadata Credentials in AWS environments. Discover the approach and automation techniques used to prevent IMDS abuse at scale, gaining valuable insights into improving cloud security practices for large-scale AWS deployments.