An unauthorized access attempt was detected exploiting a misconfigured AWS WAF through a Server-Side Request Forgery (SSRF) vulnerability. The attacker aimed to access the internal AWS metadata service of Capital One's cloud environment.