---
title: Compute Instances should have legacy metadata service endpoint disabled
description: Datadog, the leading service for cloud-scale monitoring.
breadcrumbs: >-
  Docs > Datadog Security > OOTB Rules > Compute Instances should have legacy
  metadata service endpoint disabled
---

# Compute Instances should have legacy metadata service endpoint disabled
 
## Description{% #description %}

Compute Instances that utilize legacy metadata service endpoints (IMDSv1) are susceptible to potential Server-Side Request Forgery (SSRF) attacks. To help prevent these attacks, it is strongly advised to configure Compute Instances to adopt Instance Metadata Service v2, aligning with the industry's best security practices.

This rule checks that the legacy Instance Metadata Service (IMDS) endpoints are disabled on OCI Compute instances. Enabling Instance Metadata Service v2 enhances security and grants precise control over metadata access.

## Remediation{% #remediation %}

For guidance on configuring Instance Metadata Service settings, refer to the [Updating Instance Metadata](https://docs.oracle.com/iaas/Content/Compute/Tasks/updatinginstancemetada.htm) section of the Oracle Cloud Infrastructure Documentation.