38An SSRF vulnerability in one of our services just exposed EC2 instance role credentials. Walk me through the attack and the defence.▼hardNewStripeGoldman SachsJPMorgan Chase◆ premiumInstance metadata is a local credential vending machine and SSRF is the coin slot. IMDSv2 raises the bar at the host; layered defences and blast-radius limits finish the job.Open full answer →
70Cloud SDK calls across the fleet start failing with expired credentials during a traffic spike. Nothing expired. Explain it.▼mediumNewAmazon & AWSGoogleDatabricks◆ premiumEvery SDK fetches its credentials from a link-local metadata endpoint with a modest request budget. Enough containers refreshing at once and the endpoint starts refusing, which the SDK reports as an auth problem.Open full answer →
