Skip to content

Instantly share code, notes, and snippets.

@anryko

anryko/ec2.sh

Forked from kwilczynski/ec2.sh
Created April 24, 2019 09:02
Show Gist options
  • Save anryko/0ceb1c1ef59b828befbc83d8ad3e07f6 to your computer and use it in GitHub Desktop.
Save anryko/0ceb1c1ef59b828befbc83d8ad3e07f6 to your computer and use it in GitHub Desktop.
Download ZIP
Lock down EC2 meta-data to root (or others) only.
Raw
ec2.sh
iptables -t filter -I OUTPUT -d 169.254.169.254 -j EC2
iptables -N EC2
iptables -A EC2 -m owner --uid-owner root -d 169.254.169.254 -j ACCEPT
iptables -A EC2 -j REJECT --reject-with icmp-host-unreachable
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment