Once you are on the EC2 you can configure the CLI without the credentials and it will use the role / creds in the IMDS.
Once you are on the EC2 you can configure the CLI without the credentials and it will use the role / creds in the IMDS.
The IAM permissions can be setup to allow anyone from any account to do anything they want. But still requires valid keys.
The IAM permissions can be setup to allow anyone from any account to do anything they want. But still requires valid keys.