My suspicion at the moment is that that it's not querying the metadata service for credentials and is instead mistakenly attempting to source credentials from elsewhere. To confirm this I'm going to try a debug build where I disable all but the instance profile credential source