Fetch-url-http-3a-2f-2fmetadata.google.internal-2fcomputemetadata-2fv1-2finstance-2fservice Accounts-2f -

Explicitly block requests to link-local IP addresses like 169.254.169.254 (which the metadata DNS resolves to) and loopback addresses like 127.0.0.1 .

With the metadata server:

Buckets of Fun: Getting Backstage at the DEFCON 31 Cloud ... Explicitly block requests to link-local IP addresses like

To fetch service account information, you'll need to send a GET request to the metadata server with the appropriate path. Here's an example using curl : Explicitly block requests to link-local IP addresses like

Note: The email address must be URL‑encoded because it contains the @ symbol ( %40 ). Explicitly block requests to link-local IP addresses like