oscp/Necronomicon/Cloud/AWS/Metadata API.md

• Full list of endpoints:

  • https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/instancedata-data-categories.html

• Region

  • http://169.254.169.254/latest/meta-data/placement/availability-zone

• Instance ID

  • http://169.254.169.254/latest/meta-data/instance-id

• AMI ID (image ID)

  • http://169.254.169.254/latest/meta-data/ami-id

• Public hostname (containing public IP as well)

  • http://169.254.169.254/latest/meta-data/public-hostname

• MAC address

  • http://169.254.169.254/latest/meta-data/network/interfaces/macs/

• Owner ID

  • http://169.254.169.254/network/interfaces/macs/<MAC_address>/owner-id

• Security Groups

  • http://169.254.169.254/network/interfaces/macs/<MAC_address>/security-groups

• Subnet ID

  • http://169.254.169.254/network/interfaces/macs/<MAC_address>/subnet-id

• Subnet IP range

  • http://169.254.169.254/network/interfaces/macs/<MAC_address>/subnet-ipv4-cidr-block

• User-Data (instance startup script)

  • http://169.254.169.254/latest/user-data/
  • Accepts BASH scripts as well as cloud-init files, which are in YAML

• IAM role name

  • http://169.254.169.254/latest/meta-data/iam/security-credentials

• IAM temporary credentials

  • http://169.254.169.254/latest/meta-data/iam/security-credentials/demo-role.ec2
  • These credentials allow one to assume the IAM role of the instance from any AWS client (including the CLI) until the credentials are reset (every six hours)