Re:Tips for Getting Started With AWS
by cpucycling on Tuesday December 31, 2013 @01:51PM
(#6992126)
By all means, have a separate, passphrase-protected key for each separate device (desktop, laptop, tablet) and push them to your machines using something like chef and the 'users' and 'sudo' community cookbooks, at a minimum, and destroy the .pem after you initially set up the host.
There is a reason that Amazon only configures one user with only one key, and it's not because that's how sane people access their machine.
Here's a better idea. Learn to use IAM properly and rotate your keys on a schedule.
You're thinking of AWS access keys. Not the same thing.
Oh, I thought this article was about AWS not SSH. My bad. Yeah, don't rotate your SSH keys either.
Re:Tips for Getting Started With AWS
by cpucycling on Tuesday December 31, 2013 @01:52PM
(#6992131)
IAM rotates ssh keys?
I, too, was astounded that anybody would be recommending keeping your keys 'public' like this. By all means, keep it on a few USB sticks that are nicely secure - and have a good plan in place in case you lose one.