deps: github.com/hashicorp/terraform@sdk-v0.11-with-go-modules

Updated via: go get github.com/hashicorp/terraform@sdk-v0.11-with-go-modules and go mod tidy

1 files changed, 24 insertions, 0 deletions

diff --git a/vendor/github.com/aws/aws-sdk-go/aws/ec2metadata/service.go b/vendor/github.com/aws/aws-sdk-go/aws/ec2metadata/service.go
index 5b4379d..ef5f732 100644
--- a/vendor/github.com/aws/aws-sdk-go/aws/ec2metadata/service.go
+++ b/vendor/github.com/aws/aws-sdk-go/aws/ec2metadata/service.go
@@ -1,5 +1,10 @@
 // Package ec2metadata provides the client for making API calls to the
 // EC2 Metadata service.
+//
+// This package's client can be disabled completely by setting the environment
+// variable "AWS_EC2_METADATA_DISABLED=true". This environment variable set to
+// true instructs the SDK to disable the EC2 Metadata client. The client cannot
+// be used while the environemnt variable is set to true, (case insensitive).
 package ec2metadata
 
 import (
@@ -7,17 +12,21 @@ import (
         "errors"
         "io"
         "net/http"
+        "os"
+        "strings"
         "time"
 
         "github.com/aws/aws-sdk-go/aws"
         "github.com/aws/aws-sdk-go/aws/awserr"
         "github.com/aws/aws-sdk-go/aws/client"
         "github.com/aws/aws-sdk-go/aws/client/metadata"
+        "github.com/aws/aws-sdk-go/aws/corehandlers"
         "github.com/aws/aws-sdk-go/aws/request"
 )
 
 // ServiceName is the name of the service.
 const ServiceName = "ec2metadata"
+const disableServiceEnvVar = "AWS_EC2_METADATA_DISABLED"
 
 // A EC2Metadata is an EC2 Metadata service Client.
 type EC2Metadata struct {
@@ -75,6 +84,21 @@ func NewClient(cfg aws.Config, handlers request.Handlers, endpoint, signingRegio
         svc.Handlers.Validate.Clear()
         svc.Handlers.Validate.PushBack(validateEndpointHandler)
 
+        // Disable the EC2 Metadata service if the environment variable is set.
+        // This shortcirctes the service's functionality to always fail to send
+        // requests.
+        if strings.ToLower(os.Getenv(disableServiceEnvVar)) == "true" {
+                svc.Handlers.Send.SwapNamed(request.NamedHandler{
+                        Name: corehandlers.SendHandler.Name,
+                        Fn: func(r *request.Request) {
+                                r.Error = awserr.New(
+                                        request.CanceledErrorCode,
+                                        "EC2 IMDS access disabled via "+disableServiceEnvVar+" env var",
+                                        nil)
+                        },
+                })
+        }
+
         // Add additional options to the service config
         for _, option := range opts {
                 option(svc.Client)