AWS > EC2 >

EC2 Instance Key Based Login

MEDIUM

Source

CloudSploit

ec2-instance-key-based-login

management console

Ensures EC2 instances have associated keys for password-less SSH login

AWS allows EC2 instances to be launched with a specified PEM key for SSH login which should be used instead of user and password login.

Recommended Actions

Ensure each EC2 instance has an associated SSH key and disable password login.

Links

https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-key-pairs.html

Aqua Container Security

Aqua Security is the largest pure-play cloud native security company, providing customers the freedom to innovate and run their businesses with minimal friction. The Aqua Cloud Native Security Platform provides prevention, detection, and response automation across the entire application lifecycle to secure the build, secure cloud infrastructure and secure running workloads wherever they are deployed.