My Pods Got AWS Permissions From Thin Air. No Keys Anywhere.

I opened a shell inside one of my pods and asked AWS who it was. It answered with an IAM role and a set of temporary credentials. No access keys anywhere. Not in an environment variable, not in a Kube