Speaking of hacky places to hide API keys, I've just learned you can also put your other non-AWS API keys in the "user data" field on an instance and retrieve t

Speaking of hacky places to hide API keys, I've just learned you can also put your other non-AWS API keys in the "user data" field on an instance and retrieve them using this http://docs.amazonwebservices.com/AWSEC2/latest/UserGuide/AESDG-chapter-instancedata.html http://docs.amazonwebservices.com/AWSEC2/latest/UserGuide/AE... Now if those other API providers could also have automatically rotating temporary API keys where the key exchange is secure we'd be set!