PUBLIC_DOMAINSECURITY_ADVISORY
CISA / NSA Joint Cybersecurity Advisory: Mitigating SSRF in Cloud Infrastructures
Agency: Cybersecurity and Infrastructure Security Agency (CISA) & NSA
Docket: AA24-082A
Filing Date: 2024-03-22
Document Abstract & Scope
Technical architectural guidance for defending cloud workloads against Server-Side Request Forgery (SSRF) targeting IMDSv2, private subnets, and metadata endpoints.
Historical & Investigative Significance
Definitive federal security guidance adopted in TRIHEX Safe Ingestion Engine for SSRF defense.
Legal Provenance
Legal Right of Access:
17 U.S.C. § 105 (Official United States Government Work)
Audited By:TRIHEX Security Lab
Last Audit:9/2/2026