Scoping AWS IAM roles to Docker containers
Amazon Web Services (AWS) has a really great security feature, called IAM roles, that can be used with EC2 as instance profiles. When you…launch an EC2 instance with an instance profile, the IAM role credentials are available to the instance through the metadata service at http://169.254.169.264. Unlike IAM user credentials, IAM role credentials automatically rotate on a schedule (generally every 15 minutes), so even if the credentials are stolen, they’re only good for a short time period. ¶ A downside of IAM roles is that every single process on the system has access to them.
Ryan LaneMar 9
