standard
turbot/aws_compliance

Pipeline: Correct EC2 instances with IMDSv1 enabled

Disable IMDSv1 for EC2 instances.

Run the pipeline

To run this pipeline from your terminal:

flowpipe pipeline run aws_compliance.pipeline.correct_ec2_instances_with_imdsv1_enabled \
--arg 'items=<list(object({
title = string,
instance_id = string,
region = string,
conn = string
}))>'

Use this pipeline

To call this pipeline from your pipeline, use a step:

step "pipeline" "step_name" {
pipeline = aws_compliance.pipeline.correct_ec2_instances_with_imdsv1_enabled
args = {
items = <list(object({
title = string,
instance_id = string,
region = string,
conn = string
}))>
}
}

Params

NameTypeRequiredDescriptionDefault
items
list(object({
      title       = string,
      instance_id = string,
      region      = string,
      conn        = string
    }))
YesA collection of detected resources to run corrective actions against.-
notifier
notifier
YesThe name of the notifier to use for sending notification messages.notifier.default
notification_level
string
verbose, info, error
YesThe verbosity level of notification messages to send.info
approvers
list(notifier)
YesList of notifiers to be used for obtaining action/approval decisions.notifier.default
default_action
string
notify, skip, disable_imdsv1
YesThe default action to use when there are no approvers.notify
enabled_actions
list(string)
skip, disable_imdsv1
YesThe list of enabled actions approvers can select.
[
"skip",
"disable_imdsv1"
]

Outputs

This pipeline has no outputs.

Tags

category = Compliance
folder = Internal
mod = aws
service = AWS/EC2