Add GitHub ssh keys to ec2 instance

Question

I would like to share a GitHub project ssh key pair with all new instances that I create so that it's possible to git clone and launch the program from the user data file without having to ssh in the instance.

Quite easy to do on GCP but not quite sure how to do any of that in AWS ec2 instances.

Edit: In GCP I would simply use the "Secret manager" which is shared between instances.

Answer 1

Since you mention that you'd use Secret Manager in a Google Cloud, it seems reasonable to suggest the AWS Secrets Manager service.

Set your private key as a Secret, and grant access to it with an IAM role attached to the EC2 instance. Then install the AWS CLI package before building the AMI, and you can use it to fetch the secret on first boot with a User Data script.

Answer 2

Because I find the AWS secret manager hard to use and expensive compared to GCP here's the solution I ended up using.

this is my user data file that is passed to the instance on creation.

sudo mkdir ~/.ssh
sudo touch ~/.ssh/id_rsa
sudo echo "-----BEGIN OPENSSH PRIVATE KEY-----
My GitHub private key" >> ~/.ssh/id_rsa
sudo chmod 700 ~/.ssh/
sudo chmod 600 ~/.ssh/id_rsa
git clone https://wwww.github.com/your-repo 
# other commands goes here

Note that it will add this to the root user.

not the cleanest solution but it works well

edit: sudo shouldn't be required because it all runs as root