My company intends to hire an external contractor for some dev-ops jobs on our EC2 servers. We use Ubuntu accessed using a
.pem certificate file.
For obvious reasons, I do not want to share my
.pem key with an outsider - if the key is lost, anyone on the internet can access my machines.
I can add the contractor's ssh key to the
.ssh/authorized_keys on all the servers, but that would be tedious and new servers won't be accessible by him unless I change the template server image.
Is there an easier way to grant temporary, revokable access to EC2 machines?