InstanceMetadataDefaultsResponse

The default instance metadata service (IMDS) settings that were set at the account level in the specified AWS  Region.

httpEndpoint

Indicates whether the IMDS endpoint for an instance is enabled or disabled. When disabled, the instance metadata can't be accessed.

Type: String

Valid Values: disabled | enabled

Required: No

httpPutResponseHopLimit

The maximum number of hops that the metadata token can travel.

Type: Integer

Required: No

httpTokens

Indicates whether IMDSv2 is required.

optional – IMDSv2 is optional, which means that you can use either IMDSv2 or IMDSv1.
required – IMDSv2 is required, which means that IMDSv1 is disabled, and you must use IMDSv2.

Type: String

Valid Values: optional | required

Required: No

instanceMetadataTags

Indicates whether access to instance tags from the instance metadata is enabled or disabled. For more information, see Work with instance tags using the instance metadata in the Amazon EC2 User Guide.

Type: String

Valid Values: disabled | enabled

Required: No

managedBy

The entity that manages the IMDS default settings. Possible values include:

account - The IMDS default settings are managed by the account.
declarative-policy - The IMDS default settings are managed by a declarative policy and can't be modified by the account.

Type: String

Valid Values: account | declarative-policy

Required: No

managedExceptionMessage

The customized exception message that is specified in the declarative policy.

Type: String

Required: No

Contents