block access to ec2 instance

Question

one of our developer has quit the organization and he has the original pem file that gives access to our ec2 instance. so what steps can we take to avoid any misdoings by him?

kentrad · Answer

Here are the steps to replace the key, [Add or remove a public key on your instance](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/replacing-key-pair.html).

You could also restrict SSH via the [security group](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/working-with-security-groups.html) assigned to the instance.

You may want to use [Sessions Manager](https://docs.aws.amazon.com/systems-manager/latest/userguide/session-manager-getting-started.html) to login to the instance which allows you to control access using IAM instead of SSH keys.

Gary Mclean · Answer

Ensure SSH access over the public Internet isnt permitted. 
If it is, you will need to change the SSH key

Otherwise ensure said developer doesnt have any remote access to the environment.

Syd · Answer

Check out this document - https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/replacing-key-pair.html

block access to ec2 instance

Relevant content