EC2 instance metadata TL;DR: IMDSv1 vs IMDSv2 + the IAM role behind the metadata service — every SSRF’s favourite target. Stub — to be filled in. What it is TODO Preconditions / where it applies TODO Technique TODO Detection and defence TODO References https://hackingthe.cloud/aws/exploitation/ec2-metadata-ssrf/