The AI answer we saw
Both AWS IMDS and Azure IMDS use the 169.254.169.254 link-local address to serve instance metadata, but differ in implementation. AWS IMDS offers two versions: IMDSv1 (simple HTTP GET) and IMDSv2 (session-oriented with token-based authentication for improved security). Azure IMDS requires a mandatory 'Metadata: true' header on all requests and does not support IMDSv1-style unauthenticated access. AWS IMDS is accessible on all EC2 instance types, while Azure IMDS is available on all Azure VMs and VMSS instances. Both operate at the hypervisor level and are not routable beyond the local instance, ensuring isolation. For enterprise deployments, AWS IMDSv2 and Azure IMDS both mitigate SSRF-based metadata exposure risks through their respective authentication mechanisms.
Captured during this Readable report run. Answers can vary by AI tool and date.