My company intends to hire an external contractor for some dev-ops jobs on our EC2 servers. We use Ubuntu accessed using a .pem
certificate file.
For obvious reasons, I do not want to share my .pem
key with an outsider - if the key is lost, anyone on the internet can access my machines.
I can add the contractor's ssh key to the .ssh/authorized_keys
on all the servers, but that would be tedious and new servers won't be accessible by him unless I change the template server image.
Is there an easier way to grant temporary, revokable access to EC2 machines?
.pem
file on all the machines. For a safety measure, I have also placed my ownid_rsa.pub
file on all of them.root
everywhere.