Restrict Access to Metadata Services
Info
ID: MS-M7027
MITRE mitigation: M1035
Block or limit application access to instance metadata endpoints (IMDS) unless explicitly required for legitimate functionality. This prevents attackers from querying metadata services to obtain credentials or sensitive environment information.
Techniques Addressed by Mitigation
| ID | Name | Use |
|---|---|---|
| MS-TA7016 | Access workload identity credentials | Block or limit application access to instance metadata endpoints (IMDS) unless explicitly required for legitimate functionality. |
| MS-TA7022 | Instance metadata API | Block or limit access to metadata endpoints from within applications unless required for specific functionality. |