Instances are a new principal type in IAM. You can now apply policy to groups of instances just as you do for groups of users. You no longer need to configure user credentials for the services running on your compute instances. For more information, see Calling Services from an Instance.