Require Session-Based Metadata Access

Info

ID: MS-M7028
MITRE mitigation: -

Use IMDSv2 (AWS) or equivalent protections that require token-based sessions to access metadata APIs. Session-based access adds an additional layer of protection against unauthorized metadata queries.

Techniques Addressed by Mitigation

ID	Name	Use
MS-TA7016	Access workload identity credentials	Use IMDSv2 (AWS) or equivalent protections that require token-based sessions to access metadata APIs.