https://que.com/attacking-public-clouds-through-apis/