Metadata services

Cloud instances can fetch their own credentials from a local address, which is convenient and is also what makes server-side request forgery so dangerous in cloud.

Persuade an application to make a request to that address and it may hand back credentials for the role the instance holds. Newer versions of the service require a token exchange specifically to stop this, and older configurations remain common.