Skip to content

Disable Legacy Metadata Endpoints

Info

ID: MS-M7036
MITRE mitigation: M1042

Turn off IMDSv1 or other unauthenticated metadata access endpoints where supported. Legacy metadata endpoints lack security controls and can be easily exploited by attackers to obtain sensitive information.

Techniques Addressed by Mitigation

ID Name Use
MS-TA7022 Instance metadata API Turn off IMDSv1 or unauthenticated metadata access where supported.