How to get instance role creddentials using assigned EC2's IAM role using IMDSv2

ec2_credentials.sh

#!/usr/bin/env bash

TOKEN_TTL=900 # 15 minutes
ROLE="$(curl -s http://169.254.169.254/latest/meta-data/iam/security-credentials/)"
TOKEN="$(curl -s -X PUT "http://169.254.169.254/latest/api/token" -H "X-aws-ec2-metadata-token-ttl-seconds: ${TOKEN_TTL}")"
CREDS="$(curl -s -H "X-aws-ec2-metadata-token: ${TOKEN}" "http://169.254.169.254/latest/meta-data/iam/security-credentials/${ROLE}")"
REGION=$(curl -s http://169.254.169.254/latest/dynamic/instance-identity/document | jq -r .region)

AWS_ACCESS_KEY_ID="$(echo "${CREDS}" | jq -r .AccessKeyId)"
AWS_SECRET_ACCESS_KEY="$(echo "${CREDS}" | jq -r .SecretAccessKey)"
AWS_SESSION_TOKEN="$(echo "${CREDS}" | jq -r .Token)"
AWS_REGION="${REGION}"

export AWS_ACCESS_KEY_ID
export AWS_SECRET_ACCESS_KEY
export AWS_SESSION_TOKEN
export AWS_REGION

aws s3 ls # replace with a command you are allowed to run

#--------------------------------------------------------------------------------------------------
# References
# - https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/iam-roles-for-amazon-ec2.html#instance-metadata-security-credentials
#--------------------------------------------------------------------------------------------------