The situation, I've inherited a windows infrastructure in AWS. The ami's were created with someone else's keypair who has now left the business. I have a requirement to remove those keys.
The way I have found so far is to create a new windows ami, detach the disks from the instance with the keypair to be removed and attach the disks to the new instance with the new keypair as /dev/sda1.
In my testing I discovered that once the disks are reattached you can't recover the windows password as the keypair fail. That's fine as the infrastructure to be changed is has AD logins. I'll be testing today on a test instance that will have AD.
Are there any concerns to my approach, or is there something better?
Just to clarify its not the iam it's the actual public private key pair they created to launch the (16 of them) actual instance. in the Instance dashboard each server shows as having Mr. A.N. Others key name in the key name column. The business wants it changed