How to disable Azure Instance Metadata Service

Question

I wanted to disable the Instance Metadata Service on the VM's. Even though, we run the URL within the VM itself, http://169.254.169.254/metadata/instance?api-version=2021-02-01, I don't want my machine share it's details at any cost.

Is there a way, I can disable this service in Azure, other cloud providers had provided the option to disable the Metadata Service for their VM's

There is no option of disabling the Metadata Service in the Azure Portal and went through the KB article: https://learn.microsoft.com/en-us/azure/virtual-machines/linux/instance-metadata-service?tabs=linux no mention of disabling the Metadata Service.

Answer 1

@Prashanth Kumar

Firstly, apologies for the delay in responding here and any inconvenience this issue may have caused.

I would like to let you know that this is a service which communicates with the fabric controller inside azure portal to get the VM properties and also works with azure agent, so it is not possible to disable it.

However, you can restrict all the access to the VM from the specific address of the service and allow the access to the azure agent through Windows Firewall. Not sure if this work around can help with your use case.

Please see below steps for the same:

Hope this helps answer your query.

Please 'Accept as answer' if it helped, so that it can help others in the community looking for help on similar topics.