[default] aws_access_key_id = AKIAIOSFODNN7EXAMPLE aws_secret_access_key = wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY

: This is a URL-encoded version of ../ . The .. (dot-dot-slash) is the universal command to "go up one directory."

The string -template-..-2F..-2F..-2F..-2Froot-2F.aws-2Fcredentials is not a template, a feature, or a configuration. It is a digital lockpick. It exploits lazy path handling to read one of the most sensitive files on a Linux cloud server.

Do not try to block .. , -2F , or .aws . Attackers have infinite encoding tricks (Unicode, double URL encoding, base64). Instead, use a whitelist.