Currently, there is no out-of-the-box way to ensure that machine-provisioned EC2 instances can reach their own tags. The option is disabled by default and requires an API call to enable it. It would be great to have an option to enable it in CircleCI