Are the keypairs created and added when launching an EC2 instance added to ~/.ssh/authorized_keys for the ec2-user ? or is there another mechanism used? If so, would the key have a name like 'master'? I'm trying to audit the public keys on various instances and don't want to delete a master key.
Also does the .pem key file downloaded from the AWS console also contain an X.509 certificate?