DEVOPS-5728 | Make IMDSv2 required in this module (#11)

Author: jourdan-west

README.md

@@ -40,7 +40,6 @@ and also serves as a unique key for re-use.
 addresses with instances managed by the auto scaling group.
 * `ebs_optimized` - (Default: **false**) Flag to enable Elastic Block Storage
 (EBS) optimization.
-* `enable_imdsv2` - (Default: false) Flag to enforce Instance Metadata Service IMDSv2.
 * `enable_monitoring` - (Optional) Flag to enable detailed monitoring.
 * `instance_based_naming_enabled` - (Optional) Flag to enable dynamic name tags
 on instances. The default format is **stack_item_label-instance-id**. Requires

group/lt/main.tf

@@ -64,16 +64,10 @@ resource "aws_launch_template" "lt" {
     }
   }
 
-  # Replace with a simple "metadata_options" block when rolling out to Prod.
-  # This ensures we don't introduce drift to Prod in the meantime.
-  dynamic "metadata_options" {
-    for_each = var.enable_imdsv2 ? [1] : []
-
-    content {
-      http_endpoint               = "enabled"
-      http_tokens                 = "required"
-      http_put_response_hop_limit = 2
-    }
+  metadata_options {
+    http_endpoint               = "enabled"
+    http_tokens                 = "required"
+    http_put_response_hop_limit = 1
   }
 
   instance_type = var.instance_type

group/lt/variables.tf

@@ -1,12 +1,6 @@
 # Input Variables
 
 ## Resource tags
-#Remove this var when rolling out IMDSv2 to Prod
-variable "enable_imdsv2" {
-  type    = bool
-  default = false
-}
-
 variable "stack_item_fullname" {
   type = string
 }

group/main.tf

@@ -75,7 +75,6 @@ module "lt" {
   ebs_vol_size                = var.ebs_vol_size
   ebs_vol_snapshot_id         = var.ebs_vol_snapshot_id
   ebs_vol_type                = var.ebs_vol_type
-  enable_imdsv2               = var.enable_imdsv2
   enable_monitoring           = var.enable_monitoring
   instance_market_options     = local.instance_market_options
   instance_profile            = var.instance_profile

group/variables.tf

@@ -1,12 +1,6 @@
 # Input Variables
 
 ## Resource tags
-#Remove this var when rolling out IMDSv2 to Prod
-variable "enable_imdsv2" {
-  type    = bool
-  default = false
-}
-
 variable "stack_item_fullname" {
   type        = string
   description = "Long form descriptive name for this stack item. This value is used to create the 'application' resource tag for resources created by this stack item."