- Full list of endpoints: - https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/instancedata-data-categories.html - Region - http://169.254.169.254/latest/meta-data/placement/availability-zone - Instance ID - http://169.254.169.254/latest/meta-data/instance-id - AMI ID (image ID) - http://169.254.169.254/latest/meta-data/ami-id - Public hostname (containing public IP as well) - http://169.254.169.254/latest/meta-data/public-hostname - MAC address - http://169.254.169.254/latest/meta-data/network/interfaces/macs/ - Owner ID - http://169.254.169.254/network/interfaces/macs//owner-id - Security Groups - http://169.254.169.254/network/interfaces/macs//security-groups - Subnet ID - http://169.254.169.254/network/interfaces/macs//subnet-id - Subnet IP range - http://169.254.169.254/network/interfaces/macs//subnet-ipv4-cidr-block - User-Data (instance startup script) - http://169.254.169.254/latest/user-data/ - Accepts BASH scripts as well as cloud-init files, which are in YAML - IAM role name - http://169.254.169.254/latest/meta-data/iam/security-credentials - IAM temporary credentials - http://169.254.169.254/latest/meta-data/iam/security-credentials/demo-role.ec2 - These credentials allow one to assume the IAM role of the instance from any AWS client (including the CLI) until the credentials are reset (every six hours)