diff --git a/main.tf b/main.tf
index 57f03fd..4936d6a 100644
--- a/main.tf
+++ b/main.tf
@@ -74,6 +74,11 @@ resource "aws_instance" "instance" {
   key_name                    = var.key_name
   user_data                   = var.user_data == "" ? data.template_file.user_data.rendered : var.user_data
 
+  metadata_options {
+    http_endpoint = "enabled"
+    http_tokens   = "required"
+  }
+
   tags = merge(
     {
       "Name" = format("%s-bastion", var.environment)