Amazon EC2 now publishes ImdsV1Enabled CloudWatch metric
Amazon EC2 now supports an ImdsV1Enabled CloudWatch metric, giving customers visibility into which of their EC2 instances still have Instance Metadata Service Version 1 (IMDSv1) enabled. You can use this metric to track your migration to IMDSv2 across your accounts and Regions, at scale.
With the ImdsV1Enabled metric, you can configure CloudWatch dashboards and alarms to track instances that still allow IMDSv1, identify migration gaps, and prioritize remediation, without building your own tooling to check the metadata options of instances across accounts and Regions. This gives you a reliable, ongoing signal to track and complete your IMDSv2 migration.
The ImdsV1Enabled CloudWatch metric is available in all AWS Regions at no additional cost.
To learn more, see the ImdsV1Enabled CloudWatch metric in the Amazon EC2 User Guide. For step-by-step migration instructions, see Transition to IMDSv2 in the Amazon EC2 User Guide.