Any SSRF vulnerability discovered in Target Area 2 should be tested for access to the AWS Instance Metadata Service (IMDS) at `http://169.254.169.254/`. - If IMDS v1 is accessible (no token required), retrieve IAM role credentials and document what those credentials can access. - Check whether the L