Adversaries may attempt to access the Cloud Instance Metadata API to collect credentials and other sensitive data.

Tactics
TA0006

Sub-technique of
T1552


See: MITRE ATT&CK