Bring your own cloud
Does BYOC work with IMDSv2?
Quick answer
Yes, and IMDSv2 is enforced by default.
The detail that matters
IMDSv1 is reachable from a compromised build step with a single HTTP request. Enforcing v2 is not optional on runners.
Your next build could be twice as fast, at half the price
Start free. Migrating away is the same one line, and we publish that diff too.
Related
Can runners access my private network?Yes, via BYOC runners in your VPC or a mesh network such as Tailscale.Can runners run in my own cloud account?Yes. BYOC deploys runners into your AWS, GCP or Azure account while the control plane stays managed.What does runnerhut create in my cloud account?An autoscaling group, a cache bucket, a registry pull-through cache, a scoped IAM role and a VPC endpoint.What AWS permissions does BYOC need?Permissions to manage its own autoscaling group, its cache bucket and its instance role — nothing broader.