Insecure configuration

Instance UserData

Risk Level

Informational (4)

Platform(s)
  • N/A

Description

Instance metadata can be used to access user data that was specified when launching the instance. For example, a parameter can be specified for configuring the instance, or include a simple script. Secrets were found for the instance {instance_id} in the user data attribute, a malicious actor may use the secrets to compromise additional assets in the account