[elliotanderson]

You can use the new AWS-EC2 auth backend in Vault 0.6

https://www.vaultproject.io/docs/auth/aws-ec2.html

[otterley]

That backend is very nascent, so don't oversell it. It currently is AMI dependent, making it next to useless for a lot of teams.