Interactive Cloud Misconfiguration Explorer

Enforce IMDSv2: This version requires a session-oriented approach with a secret token, which protects against basic SSRF attacks.
Firewall Rules: Apply local firewall rules (iptables) on the instance itself to prevent the web server process from being able to reach the metadata endpoint (\`169.254.169.254\`).

A hands-on guide to common cloud security pitfalls. Click a component in the architecture diagram to analyze a potential misconfiguration.

Click an interactive component in the diagram to learn about a common misconfiguration.