CODEWITHSUNDEEP
amazon-web-servicesamazon-ec2
vikramvi
vikramvi

Reputation: 3635

How to manage AWS EC2 instance when outsourced developer needs to access it?

I've outsourced development work to another company.

ATM they have AWS login details and EC2 instance key pair ( root user )

Once they deliver project, I don't want them to have access to either of AWS and/or EC2, how to achieve the same ?

  1. For AWS I can set 2FA and change password
  2. How about EC2 instance ? Their developer still has key pair with him.

I looked into AWS documentation but didn't understand how to manage permission properly.

I'm new to AWS and EC2, please help with this basic queries

Upvotes: 0

Views: 265

Answers (1)

Adiii
Adiii

Reputation: 60074

You should not allow any user to access your EC2 instance with root key.

Normal practice:

  • Ask outsource developer to give his public key
  • Add his public to EC2 instance in authorized keys
  • Once the project is done to remove his public key from the ec2 instance.

Best practice in case of AWS:

  • Register instance in OpsWork stack
  • Ask user for his public key
  • Add user in the OpsWork stack as he is already AWS user
  • He will able to access the instance

So once the project, Delete the user from Ops work and AWS, his access will be revoked. In this case you do not need to change anything on instance side, AWS OpsWork will take care of it.

For AWS I can set 2FA and change password

Better to create IAM user for him, once the project is done delete that user.

Upvotes: 3

Related Questions