Webhook-url-http-3a-2f-2f169.254.169.254-2fmetadata-2fidentity-2foauth2-2ftoken |work| -

Run a sidecar proxy (e.g., Webhook Relay or Nginx ) that strictly filters outbound destinations. Never let your application logic resolve DNS or IPs directly.