diff --git a/README.md b/README.md
index c771e18..0824295 100644
--- a/README.md
+++ b/README.md
@@ -10,9 +10,9 @@ sources in the following default order:
 2. OS environment variables
 3. An AWS [credentials file][1]
 4. ECS task credentials
-5. EC2 metadata
-6. EKS Pod Identity
-7. Web Identity
+5. EKS Pod Identity
+6. Web Identity
+7. EC2 metadata
 
 Usage
 -----
diff --git a/src/aws_credentials_provider.erl b/src/aws_credentials_provider.erl
index 91ab327..efdcee6 100644
--- a/src/aws_credentials_provider.erl
+++ b/src/aws_credentials_provider.erl
@@ -35,9 +35,9 @@
 -type provider() :: aws_credentials_env
                   | aws_credentials_file
                   | aws_credentials_ecs
-                  | aws_credentials_ec2
                   | aws_credentials_eks
                   | aws_credentials_web_identity
+                  | aws_credentials_ec2
                   | module().
 -type error_log() :: [{provider(), term()}].
 -export_type([ options/0, expiration/0, provider/0, error_log/0 ]).
@@ -50,9 +50,9 @@
 -define(DEFAULT_PROVIDERS, [aws_credentials_env,
                             aws_credentials_file,
                             aws_credentials_ecs,
-                            aws_credentials_ec2,
                             aws_credentials_eks,
-                            aws_credentials_web_identity]).
+                            aws_credentials_web_identity,
+                            aws_credentials_ec2]).
 
 -spec fetch() ->
         {ok, aws_credentials:credentials(), expiration()} |