diff --git a/variables.tf b/variables.tf
index d5b8bc0..b97f503 100644
--- a/variables.tf
+++ b/variables.tf
@@ -160,7 +160,7 @@ variable "metadata_options" {
   default = {
     "http_endpoint"               = "enabled"
     "http_put_response_hop_limit" = 1
-    "http_tokens"                 = "optional"
+    "http_tokens"                 = "required"
   }
 }
 
diff --git a/wrappers/main.tf b/wrappers/main.tf
index 494d2cb..da4045b 100644
--- a/wrappers/main.tf
+++ b/wrappers/main.tf
@@ -45,7 +45,7 @@ module "wrapper" {
   metadata_options = try(each.value.metadata_options, var.defaults.metadata_options, {
     "http_endpoint"               = "enabled"
     "http_put_response_hop_limit" = 1
-    "http_tokens"                 = "optional"
+    "http_tokens"                 = "required"
   })
   monitoring                          = try(each.value.monitoring, var.defaults.monitoring, null)
   name                                = try(each.value.name, var.defaults.name, "")