go-metadataproxy

Allows containers to acquire IAM roles. “Metadata” here means the EC2 instance metadata normally available to EC2 instances.

The proxy exposes that metadata to containers inside or outside of EC2 hosts, so you can give individual containers scoped IAM roles, rather than the full IAM permissions of an IAM role or IAM user.