aws-metadata.yaml

id: aws-metadata

info:
  name: AWS Metadata
  author: notnotnotveg
  severity: informative

requests:
  - method: GET
    path:
      - "{{BaseURL}}/latest/meta-data/iam/security-credentials/aws-elasticbeanstalk-ec2-role"
      - "{{BaseURL}}/latest/meta-data/identity-credentials/ec2/security-credentials/ec2-instance"
    matchers:
      - type: word
        words:
          - "AccessKeyId"
        condition: or
        part: body