Test if on EC2 before trying IAM role auth

common.go

@@ -11,6 +11,7 @@ import (
 	"encoding/json"
 	"fmt"
 	"io/ioutil"
+	"net"
 	"net/http"
 	"net/url"
 	"os"
@@ -52,7 +53,7 @@ func checkKeys() {
 		}
 	}
 	// if accesskey and the secretkey are blank, get the key from the role
-	if Keys.AccessKeyID == "" {
+	if Keys.AccessKeyID == "" && onEC2() {
 
 		Keys = getIAMRoleCredentials()
 	}
@@ -63,6 +64,18 @@ func checkKeys() {
 	}
 }
 
+func onEC2() bool {
+
+	c, err := net.DialTimeout("tcp", "169.254.169.254:80", time.Second)
+
+	if err != nil {
+		return false
+	} else {
+		c.Close()
+		return true
+	}
+}
+
 func getIAMRoleList() []string {
 	// Get a list of the roles that are available to this instance
 	url := "http://169.254.169.254/latest/meta-data/iam/security-credentials/"