---
title: "Discussion on \"🔪 The AWS Autopsy | Case #01 — SSRF to IAM Credential Theft - Capital-One\n\" | Hashnode"
description: "Discussion on \"🔪 The AWS Autopsy | Case #01 — SSRF to IAM Credential Theft - Capital-One\n\". Recreate the Capital One breach using SSRF and IMDSv1. Learn how IAM misconfigurations expose sensitive S3 data in real AWS labs."
url: "https://hashnode.com/posts/the-aws-autopsy-case-01-ssrf-to-iam-credential-theft-capital-one/69fb932850ecad4533691aa3"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [🔪 The AWS Autopsy | Case #01 — SSRF to IAM Credential Theft - Capital-One](https://theawsautopsy.hashnode.dev/the-aws-autopsy-case-01-ssrf-to-iam-credential-theft-capital-one?utm_source=hashnode&utm_medium=feed)

Recreate the Capital One breach using SSRF and IMDSv1. Learn how IAM misconfigurations expose sensitive S3 data in real AWS labs.

May 6 · 10 min read · theawsautopsy.hashnode.dev  
Read the article

-   [#aws](https://hashnode.com/tag/aws)
-   [#cloud-security](https://hashnode.com/tag/cloud-security)
-   [#cloud-security-awareness](https://hashnode.com/tag/cloud-security-awareness)
-   [#aws-certified-solutions-architect-associate](https://hashnode.com/tag/aws-certified-solutions-architect-associate)
-   [#ssrf](https://hashnode.com/tag/ssrf)
-   [#iam](https://hashnode.com/tag/iam)
-   [#devsecops](https://hashnode.com/tag/devsecops)
-   [#terraform](https://hashnode.com/tag/terraform)
-   [#cybersecurity](https://hashnode.com/tag/cybersecurity)

## Written by

[Ridam Darji](https://hashnode.com/@w1tn3sss)

@w1tn3sss

  
[View profile](https://hashnode.com/@w1tn3sss)

Breaking cloud. Building defense

## Responses

Markdown supported · ⌘↵ to post

No responses yet.