Objective
To clarify Automox compatibility with Amazon Web Services (AWS) Instance Metadata Service (IMDS) versions for EC2 instances managed within the Automox platform.
Overview
When managing AWS EC2 instances, Automox retrieves instance metadata—such as the unique AWS Instance ID—to identify endpoints and maintain accurate device records.
Currently, Automox supports IMDSv1. IMDSv2 is not supported at this time due to architectural token requirements when querying instance metadata.
IMDS Version Compatibility Reference
| IMDS Version | Support Status | Operational Notes |
| IMDSv1 (Optional / Default) | Supported | Allows the Automox Agent to successfully extract the AWS Instance ID for system inventory and correlation. |
| IMDSv2 (Required / Token-backed) | Not Supported | Automox cannot currently retrieve the AWS Instance ID when IMDSv2 is set to Required (HttpTokens=required). |
Current Recommendation & Workaround
If you manage EC2 instances in AWS and rely on Automox device correlation:
Enable IMDSv1 Support: Ensure that IMDSv1 remains accessible on target EC2 instances (
HttpTokens=optional).Review Security Group Controls: Restrict access to the IMDS endpoint (
169.254.169.254) at the OS network level or via IAM policies where appropriate while leaving v1 fallback enabled.
ℹ️ Feature Request Note: An enhancement request is under active review with Automox Product Engineering to support IMDSv2 session tokens in a future agent release.