https://glc.st/posts/aws-takeover-through-ssrf-in-javascript/