[Home](./index.md) > [ibm-cloud-sdk-core](./ibm-cloud-sdk-core.md) > [VpcInstanceAuthenticator](./ibm-cloud-sdk-core.vpcinstanceauthenticator.md) ## VpcInstanceAuthenticator class The VpcInstanceAuthenticator implements an authentication scheme in which it retrieves an "instance identity token" and exchanges that for an IAM access token using the VPC Instance Metadata Service API which is available on the local compute resource (VM). The instance identity token is similar to an IAM apikey, except that it is managed automatically by the compute resource provider (VPC). The resulting IAM access token is then added to outbound requests in an Authorization header Authorization: Bearer <access-token> **Signature:** ```typescript export declare class VpcInstanceAuthenticator extends TokenRequestBasedAuthenticator ``` **Extends:** [TokenRequestBasedAuthenticator](./ibm-cloud-sdk-core.tokenrequestbasedauthenticator.md) ## Constructors

Constructor	Modifiers	Description
[(constructor)(options)](./ibm-cloud-sdk-core.vpcinstanceauthenticator._constructor_.md)		Create a new VpcInstanceAuthenticator instance.

## Properties

Property	Modifiers	Type	Description
[tokenManager](./ibm-cloud-sdk-core.vpcinstanceauthenticator.tokenmanager.md)	`protected`	[VpcInstanceTokenManager](./ibm-cloud-sdk-core.vpcinstancetokenmanager.md)

## Methods

Method	Modifiers	Description
[authenticationType()](./ibm-cloud-sdk-core.vpcinstanceauthenticator.authenticationtype.md)		Returns the authenticator's type ('vpc').
[setIamProfileCrn(iamProfileCrn)](./ibm-cloud-sdk-core.vpcinstanceauthenticator.setiamprofilecrn.md)		Sets the "iamProfileCrn" value to be used when obtaining an IAM access token
[setIamProfileId(iamProfileId)](./ibm-cloud-sdk-core.vpcinstanceauthenticator.setiamprofileid.md)		Sets the "iamProfileId" value to be used when obtaining an IAM access token