Generate New Key Pair Ec2
Instead of using Amazon EC2 to create your key pair, you can create an RSA key pair using a third-party tool and then import the public key to Amazon EC2. For example, you can use ssh-keygen (a tool provided with the standard OpenSSH installation) to create a key pair.
HowToDoInJavaIn our case we have chosen Ubuntu Linux, so creating a Key-pair is a must for us here. In this step if we create a new Key-pair, we get one file of type.pem extension. Here are the steps of creating the Key pairs. Instructions are self describing and very easy to follow. Figure 10.0: Key Pair Creation Step 1 Figure 10.1: Key Pair Creation. Go step by step 1) stop your ec2 instance. 2)take a snapshot of VM and storage. 3)create a new VM while creating it select your snapshot and create VM from your Snapshot. 4) while the creation of VM downloads your keypair. 5) once your VM UP you can ssh with a new key pair and your data will also back. Is it possible to generate a new SSH key pair for an existing instance? What are the steps to generate a new SSH key pair for an existing instance (without stoping or deleting the existing instance) if that is possible. It’s necessary to have a key pair on Amazon EC2 in order to access the instances we run. Here we talk about how to create these key pairs. For these examples, we will need the AWS CLI or ec2-api-tools. A key pair is just an SSH key pair that we have registered with AWS, and it is necessary to have them even when running Microsoft Windows instances. I am playing around with Amazon EC2 and have (finally) managed to SSH into the box from my home machine. Now I want to connect from my work machine but neglected to copy the key pair on a USB key. Is there a way of downloading an existing key pair WITHOUT dropping the instance?
By Sajal Chakraborty Filed Under: AWSEC2 stands for Elastic Compute Cloud and this is the backbone of AWSInfrastructure as a Service (IaaS) offering. In this tutorial, we will learn to create an EC2 instance from AWS console and also check how to connect EC2 from SSH client e.g. PuTTY installed in local machine.
Aws Ec2 Lost Key Pair
What is AWS EC2
Amazon Elastic Compute Cloud (Amazon EC2) provides scalable computing capacity in the Amazon Web Services (AWS) cloud. Using Amazon EC2 eliminates your need to invest in hardware up front, so you can develop and deploy applications faster.
Amazon EC2 allows us to get compute power in cloud through the launching of virtual servers called instances. When you launch an instance, you can make use of the compute as you wish, just as you would with an on-premises server. Because you are paying for the computing power of the instance, you are charged per hour while the instance is running. When you stop the instance, you are no longer charged.
There are two main things when launching instances on AWS :
- the amount of virtual hardware dedicated to the instance and
- the software loaded on the instance.
These two dimensions of new instances are controlled, respectively, by the Instance Type
and the AMI - Amazon Machine Image
.
Prerequisites
Rsa_generate_key_ex example. Before starting up this exercise we need below setup as prerequisites.
- AWS account – Must have to open one AWS account to do this exercise.
- SSL Client – PuTTY – This should be installed in Local M/C including
PuTTYgen
,PUTTY
,Pageant
applications. Full set of applications related to PutTTY can be downloaded from this link. Just unzip to a convenient location.
So, let’s get started by creating an AWS EC2 instance.
Steps to Create EC2 Instance
- Login to AWS console and open EC2 home screen – Once log in and click Services menu in the top left corner of the home screen, we will need to click the EC2 Link under compute section. The EC2 landing page will look like :
This is how EC2 Home page looks like. This is the place we land when we click EC2 link in the previous step (Figure 1.0).
- Launch a new virtual server Now we need to click the
Launch Instance
button from the EC2 Home page.This will start the instance creation wizard which will guide us through the following steps mainly:- Selecting an OS
- Choosing the size of your virtual server
- Choosing the Extra attached storage we need for this instance
- Configuring details
- Reviewing your input and selecting a key pair for SSH
- Select AMI – AMI stands for Amazon Machine Images, which is kind of a blue print of the instance that we will create, it tells about the Operating System of the Instance as well as the basic softwares that will be pre-installed. So in this step, while choosing AMI, we are choosing the underlying Operating System(OS) and the preinstalled software bundles that would be available in the instance upfront.We need to choose
AMI
based on our need. We will choose only those AMIs which falls underFree Tire Eligible
type. An AMI is the basis your virtual server starts from. AMIs are offered by AWS, by thirdparty providers, and by the community. We can also create custom AMI based on our need. Some AMIs are chargeable. Here for this exercise we will chooseUbuntu Server 16.04 LTS(HVM)
AMI.Click on the
Select
button beside the AMI to proceed with the sect step. - Select Instance Type – It’s now time to choose the computing power needed for your virtual server. Instance Type indicates the computing power of the instance by allocating the amount of virtual hardware dedicated to the instance. On AWS, computing power is classified into instance types. An instance type primarily describes the number of
vCPUs
and the amount ofmemory
an instance will be allocated to once created. We will choose only the Free Tire Eligible Instance Type (t2.micro
) which provides 1 vCPU and 1 GB of Memory. AWS has already defined many instance types, we will now choose thet2.micro
instance type for this exercise. Once instance type is selected, click on buttonNext: Configure Instance Details
in the bottom right corner of the page to proceed with the next steps. - Instance Details page This will look like below. Here we will take all the default values and proceed with clicking
Next: Add Storage
button at the bottom right corner of the page. Before proceeding to the next section please note few important things that we can modify here:- Number of Instances we are going to create in this wizard.
- We can select the Spot Instance option, Spot Instances are idle compute capacity that AWS makes available based on bid prices from customers.
- Networking/Subnet/Public IP setting – This is the VPC under which the instance would be created, We can choose existing VPC, or create a new VPC here. VPC is itself a large topic which is out of scope of this article. Please follow official AWS documentation for the same.
- Also we can configure, Shutdown Behavior, Termination Protection Flag(To avoid accidental Termination), Tenancy(Common vs dedicated H/W), Cloud Watch Detailed Monitoring. Here some of them are chargeable option.
We can Change those later also once the Instance has been created. /centos-generate-ssh-key-pair.html.
Now we will proceed to add
EBS (Elastic Block Store)
volume details associated with this instance. Configure Instance Details screen will look like - Add EBS Storage –
EBS
stands forElastic block storage
. It is basically network-attached storage attached your virtual server. This page will help us to configure Storage that will be associated with the EC2 instance that we are going to launch. We will choose default values to avoid extra cost. Make sure you choose the capacity which falls under Free Tire Eligibility to avoid incurring extra cost.Review and click
Next: Add Tags
button at the bottom right corner of the page to proceed. The EBS volume configuration page will look like - Add Tags – Tags are kind of an identifier of any AWS resources, with Tags we can easily locate the resource in future and also it helps us to classify the resources. Tags help you to organize resources on AWS. We can add max 50 tags to a particular resources. It is a simple Key value pair associated with the resource.
In this step we will add one tag
Name
with valuemyfirstec2server
. Once tag is created, we will proceed with configuring security group by clicking the “Next: Configure Security Group
” button at the bottom right corner of the page. Add Tag screen will look like: - Configure Security Group – This section is to define a firewall that helps to secure our virtual server. A security group is a virtual stateful firewall that controls inbound and outbound network traffic to AWS resources and Amazon EC2 instances. All Amazon EC2 instances must be launched into a security group. If a security group is not specified at launch, then the instance will be launched into the default security group for the Amazon VPC. The default security group allows communication between all resources within the security group, allows all outbound traffic, and denies all other traffic.In this screen we can create/reuse security groups based on our need.
In this example, assuming that we don’t have any security group created, We will choose the default option and will proceed. To proceed with next page, we will click on the
Review and Launch
button at the bottom right corner of the page. The Security Group configuration screen will look like: - Review and associate Key pair – We will now review all the configurations that we have selected so far in this screen and to proceed further we will click on
Launch
button at the bottom right corner of the page.Once we proceed, we will have to select the Key pair which will be used for authentication while connecting with the instance.
- Create a new Key Pair -Logging in to your virtual server requires a key. We use a key instead of a password to authenticate. We will create a new Key pair by choosing appropriate option from drop down and will have to provide a name of the key-pair file and then we need to download that file by clicking the
Download Key Pair
button in the page. A key is much more secure than a password, and using keys for SSH is mandatory for virtual servers running Linux on AWS. In our case we have chosen Ubuntu Linux, so creating a Key-pair is a must for us here. In this step if we create a new Key-pair, we get one file of type.pem
extension. Here are the steps of creating the Key pairs. Instructions are self describing and very easy to follow.Once we have created and downloaded the Key pair we need to proceed by clicking
Launch Instances
button in the Figure 10.2 page. - Finish Creation Process – Once we have clicked
Launch Instances
button in the last page where we have created Key pairs, we will start the actual instance creation step as below.Finally this is the screen where we will see the details of the instance that we have just created.
Now we have created our first EC2 Instance. Next we will connect to this instance from our local workstation and will install one software (Linkchecker) in EC2 instance and will learn to use that software.
Connect to EC2 Instance
AWS has provided a very good documentation in this regard. Here are the basic steps for configuring and connecting to the instance through putty.
- AWS provided steps – In the instance details page, we can click
Connect
button to view the pop up like this. This will give us the required steps and information regarding connecting to the instance, Also we can go to the actual AWS documentation by going to the link in the pop up –connect using PuTTY
link. - Use PuTTYgen to convert the Key File – Now we need the
.pem
file we downloaded while creating EC2 instance. Now we will open PuTTYgen app to convert this.pem
file to.pkk
file which will be used by PuTTY to login to the instance terminal.In the PuTTYgen application follow the below step to convert the
.pem
file.- Run the application PuTTYgen.
- Select RSA radio button under Type of Key to Generate.
- Click Load.
- Because PuTTYgen displays only
*.pkk
files, you need to switch the file extension of the File Name field to All Files. - Select the
.pem
file [in my case it issajal_ec2_key_pair.pem
], and click Open. - Confirm the dialog box.
- Click Save Private Key. Ignore the warning about saving the key without a passphrase.
Here are few screen shots for those steps.
- Start
Pageant.EXE
and select the.pkk
file. Once Pageant stated we will need to add the Key by selecting the.pkk
file we have already created. Here are the sample steps for this. - Login to EC2 Instance – Once we have
Pageant.exe
running and added the key.pkk
file, OpenPutty.exe
and give public IP address of the Instance for connect. We can get the public ip fro the instance details screen in the AWS EC2 page. Now we need to give user name asubuntu
in thelogin as
prompt. If everything goes well this would be authenticated and log in to the instance.
So now we are able to SSH connect to EC2 instance through putty.
Installing softwares on EC2 Instance
Now we will install linkchecker
software and will use that to do some testing.
- open putty and login
ti
the terminal as described above and enter the commandsudo apt-get install linkchecker -y
in the terminal. This will install the linkchecker software in the instance. - Now test the linkchecker by simply providing some URL like
linkchecker https://..
Here is the sample screen related to link checker install and usage.
Checking Logs on EC2 Instance
We can view the console log of EC2 instance from the AWS console itself by clicking on the Actions menu, choose Instance Settings > Get System Log. Here is the sample screen looks like:
How to Terminate EC2 Instance
We can terminate EC2 instance by clicking the menu option Actions > Instance State > Terminate.
Here are the consequent steps related to termination of the instance. Please note that termination means Deletion/removal of the instance from AWS system. Also we can stop the instance. Please choose accordingly.
Generate New Key Pair Ec2 Iphone
Summary
So we have seen how we can spin up one instance in the AWS within the free tire, connected with the instance through SSL client and also installed/used one sample software to get the feel of it. We have also checked how we can see the current log generated in the instance. Last but not the least don’t forget to terminate the instance to avoid cost.
Happy Learning !!