need to call out that this requires `cfn-get-metadata` tool