Exam PT0-002 topic 1 question 177 discussion

B. Server-side request forgery Server-side request forgery (SSRF) is an attack vector that allows an attacker to access internal resources that are not normally accessible from outside the network. In this case, the penetration tester has exploited this vulnerability by querying the provider's metadata to get the credentials that the instance is using to authenticate itself.

Server-side request forgery is a type of attack in which the attacker sends malicious requests to a server on behalf of a legitimate user. This can be used to gain access to data or stimulate certain actions on the server. The attacker exploits weaknesses in the web application or server architecture to carry out this attack.

SSRF occurs when an attacker can send a crafted request to a server that results in the server making a request to a third-party resource specified by the attacker.

Yup.. its B.

SSRF is the answer