I'm setting up a new EC2 instance and it's asking me if I want to associate an IAM role with the instance.
Why would or would this not be a good idea? What is the purpose?
We designed IAM roles so that your applications can securely make API requests from your instances, without requiring you to manage the security credentials that the applications use.
It's a very good idea if anything on your instances are going to call out to the various AWS APIs, as you don't have to put (or rotate) any credentials directly on the instance.