Two layers of networking stacked on top of each other — Docker container networking on the EC2 host, and SSM port forwarding from your laptop to that host — and why a container networking mismatch between Prometheus and Grafana caused connection refused even though everything looked fine.