You can create a virtualization client (hypervisor) to use for the Amazon Web Services Security Token Service (AWS STS).
If the access node and the guest instance are in the same account, you can use the admin account Access Resource Name (ARN).
If the access node and the guest instance are not in the same account, you can use the tenant account ARN.