You try to run EC2 commands in an EC2 instance you've just created but it fails due to missing credentials. What would you do?

DO NOT configure AWS credentials on the instance (this means anyone else in your account would be able to use and see your credentials).

The best practice is to attach an IAM role with sufficient permissions (like IAMReadOnlyAccess)