使用“没有密钥对继续".在EC2实例创建中? [英] Use of "Proceed without key pair" in EC2 instance creation?

问题描述

我对AWS比较陌生，正在探索可用的其他选项.在创建实例时，如果选择了不带密钥对继续"，我们将无法连接到该实例.文档中还有一条注释，指出不应选择此选项.

I am relatively new to AWS and exploring different options available. While creating an instance if "Proceed without key pair" is selected we cannot connect to the instance.The documentation also has a note saying this option should not be selected.

那么此选项的主要用途是什么?

So what is the main use of this option ?

我们应该在哪些情况下使用它?

In which scenarios are we suppose to use it?

推荐答案

在以下情况下使用选项Proceed without key pair:

The option Proceed without key pair is used when:

• 将AMI中的sshd配置为使用基于密码的身份验证，并且不需要ssh密钥即可访问计算机
• sshd可以接受其他一些username/key组合
• 如果未经授权的用户可以访问AWS仪表板或元数据，则他/她可以获取密钥对的名称，并且如果他/她可以访问密钥对，则可以使用SSH实例.没有列出密钥对，并且在AMI中生成了另一个已知密钥，因此可以解决此安全问题
• Windows :不需要管理员密码(需要解密专用密钥)，因为其他一些用户是管理员
• 警告:如果您启动没有密钥对的实例，并且没有上述提到的任何方式来访问该实例，则必须使用密钥对重新启动该实例.

• When the sshd in your AMI is configured to use password based authentication and no ssh key is needed to access the machine
• sshd can accept some other username/key combination
• If an unauthorized user gains access to AWS dashboard or metadata, he/she can get the name of the keypair and if he/she has access to the keypair, can ssh into the instance. With no keypair listed and another known key baked in the AMI, this security concern is addressed
• Windows: Admin password (for which private key is required to decrypt) is not needed because some other user is an admin
• Caution: If you launch an instance with no keypair and don't have any of the above mentined ways to access the instance, you have to relaunch the instance with a keypair.

这篇关于使用“没有密钥对继续".在EC2实例创建中?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！