: If running on EC2, enforce Amazon EC2 Instance Metadata Service Version 2 (IMDSv2) . This requires a session-oriented header that prevents most basic SSRF attacks from stealing role credentials via the metadata IP ( 169.254.169.254 ).
If you are on AWS, enforce Instance Metadata Service Version 2 , which requires a session token and prevents most SSRF attacks. callback-url-file-3A-2F-2F-2Fhome-2F-2A-2F.aws-2Fcredentials