CLI command for RSA-2048 bit key in AWS IOT

Question

Hi AWS,

There is CLI command for private key and public key in AWS IOT on cloud9 as

```
aws iot create-keys-and-certificate --set-as-active --certificate-pem-outfile certificate.pem.crt --private-key-outfile private.pem.key
```

But if I need to get the RSA-2048 bit key I am downloading it manually from Certificate section. 
Is there a CLI command for RSA-2048 bit key generation, I am unable to view one.

Please help me to get CLI command for RSA-2048 bit key in AWS IOT

Answer

Hi Balaji,

with the above command you are mentioning you are storing the RSA private key in the file `private.pem.key`.  Or are you looking for something else?

Cheers,  
Philipp

Answer

Hi Balaji,

in case you are looking for an option to download the private key from the AWS IoT Core service, that's not possible. The private key is only issued once when you call the command and never stored. This is also mentioned in the [documentation](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/iot/create-keys-and-certificate.html):

```
Note This is the only time IoT issues the private key for this certificate, so it is important to keep it in a secure location.
```
 
Cheers,  
Philipp

CLI command for RSA-2048 bit key in AWS IOT

Relevant content