Skip to content

Restrict Access to Metadata Services

Info

ID: MS-M7027
MITRE mitigation: M1035

Block or limit application access to instance metadata endpoints (IMDS) unless explicitly required for legitimate functionality. This prevents attackers from querying metadata services to obtain credentials or sensitive environment information.

Techniques Addressed by Mitigation

ID Name Use
MS-TA7016 Access workload identity credentials Block or limit application access to instance metadata endpoints (IMDS) unless explicitly required for legitimate functionality.
MS-TA7022 Instance metadata API Block or limit access to metadata endpoints from within applications unless required for specific functionality.