You'll notice
No documentation found
Cloud metadata blocklist now also covers EC2's instance-data hostname
What
Claude Code maintains a list of hostnames used by cloud providers to serve instance metadata, which is blocked from being fetched as a security precaution. That list now also includes instance-data.ec2.internal, an Amazon EC2 metadata hostname.
Why
This closes a gap where a request to this EC2 metadata hostname might not have been blocked, reducing the risk of leaking cloud instance credentials or metadata through a fetched URL.
Names in the bundleinstance-data.ec2.internal