Unused key pairs remediation

Using Console

Using CLI

Here are the step-by-step instructions to remediate the issue of unused AWS EC2 Key Pairs using AWS CLI:

Open the AWS CLI on your local machine or EC2 instance.
Use the following command to list all the available key pairs:

aws ec2 describe-key-pairs

Identify the key pairs that are not in use and note down their key pair names.
Use the following command to delete the unused key pairs:

aws ec2 delete-key-pair --key-name <key-pair-name>

Replace <key-pair-name> with the actual name of the key pair you want to delete.
Repeat step 4 for all the unused key pairs.
Verify that the unused key pairs have been removed by running the command in step 2 again.

Note: Before deleting any key pair, make sure it is not being used by any running instances. If it is being used, first remove it from the instance and then delete it.

Using Python

Sure, here are the step-by-step instructions to remediate the misconfiguration of unused AWS EC2 key pairs using Python:

Import the necessary libraries:

import boto3

Create a boto3 EC2 client:

ec2 = boto3.client('ec2')

Retrieve all the key pairs in the AWS account:

key_pairs = ec2.describe_key_pairs()

Loop through the key pairs and check if they are associated with any running instances:

for key_pair in key_pairs['KeyPairs']:
    key_name = key_pair['KeyName']
    instances = ec2.describe_instances(Filters=[{'Name': 'key-name', 'Values': [key_name]}])
    if len(instances['Reservations']) == 0:
        print('Deleting key pair:', key_name)
        ec2.delete_key_pair(KeyName=key_name)

The above code will delete all the unused key pairs in the AWS account.

Note: Please make sure to test the code in a non-production environment before running it in a production environment.

AWS Introduction

AWS Pricing

AWS Threats

AWS Misconfigurations

Unused key pairs remediation

Triage and Remediation

Remediation