I like where this is going...I just gave this a spin...

Write me an awscli command to spin up 10 more EC2 Linux instances 

Output:

aws ec2 run-instances --image-id ami-1234abcd --instance-type t2.micro --count 10 --key-name my-key-pair --security-group-ids sg-1234abcd --subnet-id subnet-1234abcd

Now we all know how many people accidentally commit AWS keys into Github and other SCM...maybe it finds some and uses them to authenticate an AWS request. Just spitballing, but maybe I'm wrong about it not being able to provision its own compute :)