cfn-init gives you an unstructured data source attached to every ASG and every EC2 instance that does not require permissions to use