Skip to content

Update fog-aws to v3.6.7 [RUN AS-IF-FOSS]

Stan Hu requested to merge sh-update-fog-aws into master

This adds support for retrieving credentials via the instance metadata server v2 (IMDSv2) (https://aws.amazon.com/blogs/security/defense-in-depth-open-firewalls-reverse-proxies-ssrf-vulnerabilities-ec2-instance-metadata-service/).

Closes #287816 (closed)

List of changes: https://github.com/fog/fog-aws/blob/master/CHANGELOG.md

Diff: https://github.com/fog/fog-aws/compare/v3.5.2..v3.6.7

Tested against an AWS server and via strace that the v2 and v1 endpoints were accessed properly.

Edited by Stan Hu

Merge request reports