Struct InstanceRoleCredentials 

pub struct InstanceRoleCredentials { /* private fields */ }

A source of credentials for the EC2 instance role attached to this machine.

Implementations

impl InstanceRoleCredentials

pub fn new(endpoint: Url) -> Result<Self>

A provider for the metadata service at endpoint.

pub fn from_env() -> Result<Option<Self>>

A provider configured the way the AWS SDKs read it, or None when AWS_EC2_METADATA_DISABLED turns instance role lookup off.

AWS_EC2_METADATA_SERVICE_ENDPOINT overrides the address, for a proxy in front of the service or a test double.

pub async fn fetch(&self) -> Result<TemporaryCredentials>

Ask the metadata service for the role’s current credentials.

The service hands out the same credentials until about five minutes before they expire, so calling this early returns what a caller already holds.

pub async fn region(&self) -> Result<String>

The region the instance runs in, for a machine that names none itself.

The metadata service answers this without any role, so it is a separate lookup that only runs when the region would otherwise be missing.