Outdated AWS SDK
asiragusa opened this issue · 2 comments
asiragusa commented
The current AWS SDK (v1.15.68) does not support IMDS v2 https://aws.amazon.com/blogs/security/defense-in-depth-open-firewalls-reverse-proxies-ssrf-vulnerabilities-ec2-instance-metadata-service/
A go get -u github.com/aws/aws-sdk-go will fixes the issue, I have tested with a local build.
ketzacoatl commented
AWS SDK (v1.15.68)
Yikes, that's quite old, from Oct/Nov 2018 it seems:
(aws/aws-sdk-go@b20851c#diff-fe3b36d57dc4378fa7b13c85492f4119)
Is there a version pin in the code we can update for CI to run the build? Or is the release driven by @lox? How do we get this update applied?