[FEATURE REQUEST] Support IMDSv2 for retrieving EC2 Metadata grains

[lorengordon]

Is your feature request related to a problem? Please describe.

AWS has released a new EC2 Metadata protocal, IMDSv2, that requires passing an authentication token when querying for EC2 Metadata. The token can be retrieved programatically. The old method, now dubbed IMDSv1, can be disabled entirely, which breaks the method salt is currently using to retrieve EC2 Metadata grains.

Describe the solution you'd like

• Attempt to retrieve the token.
• If successful, IMDSv2 is enabled, set method to IMDSv2.
• If not successful, set method to IMDSv1.
• Attempt to retrieve ec2 metadata with selected method.

Additional context

• https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/instancedata-data-retrieval.html
• https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/configuring-instance-metadata-service.html

[onepeloton-nick]

Hey all, just curious if there is movement on this at all... been a long time since any updates

[lorengordon]

There's a chance this is addressed in Salt 3006, based on #63067. If anyone following has tested it, would appreciate a report back! Thanks!

[lorengordon]

I believe this is now working in salt 3006, per the linked PR, so I'm going to close this ticket.