The metadata service is still the fastest path from SSRF to game over

IMDSv2 has been the default on new instances for a while now, and it genuinely helps. But defaults only apply to what is new.

Anything that predates the change, anything restored from an old AMI, anything spun up by a Terraform module last updated in 2021 — still v1, still one request away.

If you find an SSRF, the metadata endpoint is worth trying even when the target is obviously a modern shop. The estate is older than the architecture diagram.