Home › Forums › AWS › AWS Certified Solutions Architect Professional › Review Set 5 Question 23
-
I am questioning the validity of this entire question. Would love a critique. The answer says correctly you need to update the .ssh/authorized_keys by manually generating the KEY PAIR
However – the AWS Documentation – clearly says you can do BOTH ie generate the KEY PAIR manually or through EC2 Console – Just extract the PUBLIC KEY and dump it in the .ssh/authorized_key files -which is covered in the Red highlighted answer I chose below.
TutorialsDOJO dismisses the Red highlighted answer by saying “The keys downloaded from they EC2 Console are PRIVATE keys” – when they are in fact KEY PAIRS and the steps are clearly explained in the AWS documentation that says you can use both manually generated and EC2 Console to get the KEY PAIRS but you MUST extract the PUBLIC KEY from both:
To add or replace a key pair
-
Create a new key pair using the Amazon EC2 console or a third-party tool.
-
Retrieve the public key from your new key pair. For more information
Technically BOTH answers miss out the “extract the public key part” so both are incorrect – but in both case you get a KEY PAIR so if the question is assuming the “extraction of the public key ” that would make both answers correct thus making this question wrong in terms of having two correct answers in a single choice question?
-
-
Hello SalientListener,
Thank you for your detailed feedback and for bringing this to our attention.
You are correct in noting that both manually generated key pairs and those created via the EC2 Console can be used to update the .ssh/authorized_keys file by extracting the public key. This detail is indeed covered in the AWS documentation.
Our intent was to ensure the solution’s security and clarity. However, we recognize that both methods (manually generating the key pair or using the EC2 Console) are valid and supported ways to achieve the goal of rotating SSH keys.
To address your concern and ensure accuracy, we will revise the question and answer to reflect the correct process and eliminate ambiguity.
We apologize for any confusion caused and appreciate your assistance in improving the quality of our content.
Thank you for helping us enhance our materials. If you have any further questions or concerns, please do not hesitate to reach out.
Best regards,
Nikee @ Tutorials Dojo
Log in to reply.