I’m not a security researcher, but a normal backend dev (possibly) This comment intrigued me and led me down the typically great HN rabbit-hole.
I found a couple of sources related to this, fascinating, thank you!
https://www.techtarget.com/searchsecurity/news/252467901/Cap...
https://www.shellntel.com/blog/2019/8/27/aws-metadata-endpoi...
I knew about SSRFs, but the ability of attackers to pivot and stack and chain minor vulnerabilities continues to amaze me.
I hope AWS mitigated this metadata endpoint weakness by now.