# Compute Instance Hardening

> Master the security of cloud compute instances. Learn to secure the Instance Metadata Service (IMDS), enforce least-privilege IAM roles, and implement robust OS-level configurations.

Canonical: https://codelivly.com/rooms/compute-instance-hardening
Last updated: 2026-09-24

| | |
|---|---|
| Level | Intermediate |
| Category | Cloud Security |
| Lessons | 3 |
| Estimated time | 30 min |
| XP | 100 |

This intermediate module dives deep into securing cloud compute instances across AWS, Azure, and GCP. You will learn how to harden virtual machines by securing the Instance Metadata Service (IMDSv2), enforcing least-privilege IAM roles for machine identities, disabling unnecessary network ports, and implementing automated patch management. The curriculum covers practical techniques to prevent instance takeover, lateral movement, and cryptojacking, ensuring your cloud compute layer is resilient against both external attacks and internal misconfigurations.

## Lessons

1. What Is Instance Hardening and Why Does It Matter (30 min)
2. Security Groups, NSGs and Firewall Rules (30 min)
3. Guided Lab: Hardening a Cloud VM's Attack Surface (30 min)

## Related

- [Learning path: Cloud Infrastructure and Storage Security](https://codelivly.com/learning-paths/cloud-infrastructure-and-storage-security)
- [All rooms](https://codelivly.com/rooms)