Status: IN
Account-level IMDSv2 enforcement uses the `ModifyInstanceMetadataDefaults` API with `httpTokensEnforced`; instances must launch with `httpTokens=required` when enforcement is enabled.
Source: entries/2026/03/11/AWSEC2-latest-UserGuide-troubleshooting-launchhtml.md