Public-private key pair

As explained in Amazon Web Services in Action, Third Edition: An in-depth guide to AWS

A key pair is a matching public key and private key used for asymmetric authentication to a system.

A public-private key pair is a matching credential set used for asymmetric authentication. AWS can use a key pair to authenticate an administrator logging in to an EC2 Linux machine. section 3.1.1

When launching an EC2 instance, consider these operational properties:

• A configured key pair supports login, but the approach works only for a single user and cannot be changed externally after launch. section 3.1.1
• You can launch without a key pair and use AWS Systems Manager Session Manager, which uses temporary key pairs instead. section 3.1.1 section 3.1.2
• Session Manager avoids requiring inbound SSH or RDP connectivity, reducing the instance’s attack surface. section 3.1.2

Launching an EC2 instance without a key pair

During the EC2 launch wizard, select Proceed without a Key Pair, deselect Allow SSH Traffic, attach an IAM role for Systems Manager, and connect later through the Session Manager tab. section 3.1.1 section 3.1.2

Figure 3.6 Proceeding without a key pair

Use the launch-wizard figure to locate the option for proceeding without a key pair. section 3.1.1

How Amazon Web Services in Action, Third Edition: An in-depth guide to AWS covers it

How deep it goes

Defines the credential and explains its single-user limitation, but stops short of cryptographic mechanics.

Examples

Demonstrates proceeding without a key pair and connecting to an EC2 instance through Session Manager.

What it assumes

Assumes basic administrator authentication knowledge and teaches the EC2 launch and connection choices from the beginning.

What you can do after

Operate/configure EC2 access by choosing a key pair or replacing it with temporary Session Manager credentials.

How it connects

Connects public-private key pairs with EC2, SSH, RDP, IAM roles, and Systems Manager Session Manager.

liveBookmanning.com

Read Amazon Web Services in Action, Third Edition: An in-depth guide to AWS on liveBook Get the book at manning.com

Also explained in

• 

  liveBookmanning.com
  Software Security for DevelopersA public-private key pair is a mathematically related pair of asymmetric cryptographic keys in which the private key signs data and the public key verifies it.
• 

  liveBookmanning.com
  Hacking CryptographyA key pair consists of mathematically related public and private keys used together in asymmetric cryptography.
• 

  liveBookmanning.com
  Real-World CryptographyA key pair is a linked public key and private key used together in public-key cryptography.
• 

  liveBookmanning.com
  Secure APIsA public-private key pair consists of mathematically related cryptographic keys, with the private key used for signing and the public key used for verification.
• 

  liveBookmanning.com
  Build Python Web Apps with StreamlitA key pair is a matched private key and public key used for asymmetric authentication.

Compare how 6 books explain public-private key pair →

Related concepts

• public keyhas part · A public key is the openly distributable component of an asymmetric cryptographic key pair, used for encryption, authentication, or signature verification.
• private keyhas part · A private key is the secret component of an asymmetric cryptographic key pair used by its holder for operations such as authentication, decryption, or digital signing.
• public key cryptographyused by · Public-key cryptography is asymmetric cryptography that uses mathematically related public and private keys for encryption, decryption, signing, and verification.
• gpgproduced by · GPG is a command-line implementation of the OpenPGP standard for encryption, decryption, digital signatures, verification, and cryptographic key management.
• security keyproduced by · A security key is a physical authentication device that uses cryptographic or challenge-response operations to prove possession during authentication.
• key generationproduced by · Key generation is the process or algorithm that creates cryptographic key material, including public-key and private-key pairs.

This explainer was generated by Manning's knowledge graph from the text of Amazon Web Services in Action, Third Edition: An in-depth guide to AWS. The section links point to the parts of the book it draws on.