In July 2019, a massive data breach exposed 100 million credit applications at Capital One due to a sophisticated attack involving a misconfigured AWS Web Application Firewall (WAF). The breach was orchestrated by an insider with deep cloud expertise, leveraging a Server-Side Request Forgery (SSRF) attack vector and abusing IAM roles. Your mission is to analyze the attack sequence, identify the security gaps exploited, and understand the insider's motivations and methods.