diff --git a/cdk/lib/__snapshots__/identity-gateway.test.ts.snap b/cdk/lib/__snapshots__/identity-gateway.test.ts.snap
index 173313508..f56e8c33a 100644
--- a/cdk/lib/__snapshots__/identity-gateway.test.ts.snap
+++ b/cdk/lib/__snapshots__/identity-gateway.test.ts.snap
@@ -1054,6 +1054,9 @@ exports[`The IdentityGateway stack matches the snapshot 1`] = `
           "KeyName": {
             "Ref": "KeyName",
           },
+          "MetadataOptions": {
+            "HttpTokens": "required",
+          },
           "SecurityGroupIds": [
             {
               "Ref": "InstanceSecurityGroup",
diff --git a/cloudformation.yaml b/cloudformation.yaml
index e7256c509..a3613cd51 100644
--- a/cloudformation.yaml
+++ b/cloudformation.yaml
@@ -258,6 +258,8 @@ Resources:
         KeyName: !Ref KeyName
         SecurityGroupIds:
           - !Ref InstanceSecurityGroup
+        MetadataOptions:
+          HttpTokens: required
         UserData:
           Fn::Base64: !Sub
             - |+