NEW: The State of AWS Security 2026 - Free WhitepaperFree AWS Security Whitepaper

IMDSv2

5 items across 3 sections

Blog Posts3

Fixing EC2 Security Issues: A Practical Remediation Guide

Part 3 of 3 in the EC2 Security Series. A hands-on remediation guide mapped to the scanner findings: AWS CLI commands, Terraform snippets, and console steps for every category.

11 min read · 2026-05-19

Your EC2 Instances Are Probably Exposed Right Now

Part 1 of 3 in the EC2 Security Series. The real EC2 attack surface, from IMDSv1 and secrets in UserData to public snapshots, and the breaches that prove it matters.

7 min read · 2026-05-15

Anatomy of a Real AWS Breach: Capital One, 2019

How a misconfigured WAF, an unauthenticated metadata service, and an over-privileged IAM role combined to expose data on roughly 100 million people in the US and 6 million in Canada, and the specific checks that would have stopped it.

7 min read · 2026-09-22

Weekly News1

Week 15 - Apr 7-13, 2026

A CVSS 9.9 in Axios chains prototype pollution into IMDSv2 credential theft. Node.js already blocks the technique at the runtime layer, so production Node apps are mostly safe. Browser apps and other runtimes are not. AWS also ships Project Glasswing with Anthropic and patches a Firecracker virtio-pci out-of-bounds write.

2026-04-07 - 2026-04-13

Best Practices1

AWS EC2 Security Best Practices

Comprehensive guide to securing AWS EC2 instances. Covers IMDSv2 enforcement, security groups, EBS encryption, SSM Session Manager, private subnets, VPC Flow Logs, Amazon Inspector, and AMI hardening.

20 min read

Need Help with AWS Security?

Our AWS security experts can help you implement best practices across all these topics.