If you are running fleet on an ec2 instance, will fleet automatically pull IAM creds from the local metadata service and the attached instance role for this new firehose logging functionality?

Not as of now. If this is important for you, please file an issue.