Elevating Cloud Defenses: Migrating to IMDSv2 at Scale

Secure your cloud infrastructure by migrating from IMDSv1 to IMDSv2. Learn how to leverage Datadog Cloud Workload Security, feature flags, native cloud provider metrics, and process-level visibility to make the transition seamless. Discover strategies to harden your environment without disrupting engineering workflows or requiring extensive migrations.

In AWS, the Instance Metadata Service (IMDS) is a widely used and critical layer of cloud infrastructure that provides cloud virtual machines with access to credentials and configuration. With the introduction of IMDSv2, companies, including Datadog, have started to block the use of IMDSv1 across their fleets to mitigate potential vulnerabilities when the latter is enabled.

Attendees will learn how Datadog used Datadog Cloud Workload Security and techniques like feature flags, leveraging AWS-native metrics, and gaining process-level visibility to retire the use of IMDSv1 across its fleet with minimal effort from engineering teams.We'll also cover how you can apply those techniques to other efforts to harden existing production infrastructure without disrupting engineering team’s works or require significant migrations.