Zero Trust on AWS: Same Machine, Same URL, Two Different Answers

I sent two requests from the same EC2 instance, inside the same VPC, to the same API URL. One got a 403. The other got back a record marked TOP SECRET. The only difference was a cryptographic signatur