Glossary: Application and Credential Attacks, and AI Risks

metadata service

Also written: Instance Metadata Service, IMDS, 169.254.169.254, metadata address

A cloud service, reached at the address 169.254.169.254 on major clouds, that tells a server about itself and can hand out its temporary cloud credentials. A server requesting that address because a user supplied it is a classic sign of SSRF.