Amazon EC2 instances have access to metadata which describes the instance. of this metadata to authenticate and distribute an initial Vault token to an EC2 .