diff --git a/main.tf b/main.tf
index eec6a42..d966d43 100644
--- a/main.tf
+++ b/main.tf
@@ -144,7 +144,9 @@ resource "aws_launch_configuration" "bastion" {
   )
 
   metadata_options {
-    http_tokens = "required"
+    http_tokens                 = "required"
+    http_put_response_hop_limit = 1
+    http_endpoint               = "enabled"
   }
 
   associate_public_ip_address = false