: Standard WAFs are better at blocking complex PUT requests than simple GET requests.
Understanding the AWS IMDSv2 Token Fetch Command: curl 169.254.169
This endpoint allows an application or user inside a cloud instance (like AWS EC2) to securely request a session token.
Then, use that token to access metadata, e.g.:
