A Security Administrator at a university is configuring a fleet of Amazon EC2 instances. The EC2 instances are shared among students, and non-root SSH access is allowed. The Administrator is concerned about students attacking other AWS account resources by using the EC2 instance metadata service. What can the Administrator do to protect against this potential attack?

Question

Quizplus · Accepted Answer

Implementing iptables-based restrictions can help control and limit access to the EC2 instance metadata service, thereby preventing unauthorized access to sensitive information that could be used to attack other AWS resources.

A Security Administrator at a University Is Configuring a Fleet