Obtaining AWS credentials via SSRF attack to access instance metadata (April)
medium.com