hardNewStripeGoldman SachsJPMorgan Chase

An SSRF vulnerability in one of our services just exposed EC2 instance role credentials. Walk me through the attack and the defence.

Instance metadata is a local credential vending machine and SSRF is the coin slot. IMDSv2 raises the bar at the host; layered defences and blast-radius limits finish the job.

Updated Sep 2026 · Grounded in researched DevOps, SRE and platform engineering interview loops, written to a senior-engineer editorial bar, and never padded to hit a word count.

Instance metadata is a local credential vending machine and SSRF is the coin slot. IMDSv2 raises the bar at the host; layered defences and blast-radius limits finish the job.

20 answers per topic instead of 10, and your progress kept · no cardor unlock all 390 remaining answers · ₹2,000 / $25

UP NEXT ON YOUR JOURNEY

Next in this trackAn enterprise buyer requires that Indian customer data never leaves the country. How does the architecture change?Next in this trackEvery team wants its own AWS account on day one. How do you hand out accounts safely without becoming a bottleneck?Next in this trackLeadership wants a plan for losing a whole region. Walk me through the DR tiers and what they really cost.

DISCUSSION · 0

Nothing here yet. Say how you would answer it.