Chaining SSRF with a metadata service misconfiguration to exfiltrate IAM credentials during a pentest.