ec2-token-hop-limit-check
Checks if an Amazon Elastic Compute Cloud (EC2) instance metadata has a specified token hop limit that is below the desired limit. The rule is NON_COMPLIANT for an instance if it has a hop limit value above the intended limit.
Identifier: EC2_TOKEN_HOP_LIMIT_CHECK
Resource Types: AWS::EC2::Instance
Trigger type: Configuration changes
AWS Region: All supported AWS regions except US ISO West (Northern California), China (Beijing), Asia Pacific (Jakarta), US ISO East, Middle East (UAE), Asia Pacific (Hyderabad), Asia Pacific (Malaysia), US ISOB East (Ohio), Asia Pacific (Melbourne), AWS GovCloud (US-East), AWS GovCloud (US-West), Israel (Tel Aviv), Canada West (Calgary), Europe (Spain), China (Ningxia), Europe (Zurich) Region
Parameters:
- tokenHopLimit (Optional)
- Type: int
-
The desired token hop limit. Valid values are between 1 and 64, both inclusive. Default value is 1 if parameter is not specified.
AWS CloudFormation template
To create AWS Config managed rules with AWS CloudFormation templates, see Creating AWS Config Managed Rules With AWS CloudFormation Templates.
