Creates an SSH key pair.
The create key pair
operation supports tag-based access control via request tags. For more information, see the Lightsail Dev Guide .
See also: AWS API Documentation
See ‘aws help’ for descriptions of global parameters.
create-key-pair
--key-pair-name <value>
[--tags <value>]
[--cli-input-json | --cli-input-yaml]
[--generate-cli-skeleton <value>]
[--cli-auto-prompt <value>]
--key-pair-name
(string)
The name for your new key pair.
--tags
(list)
The tag keys and optional values to add to the resource during create.
To tag a resource after it has been created, see the
tag resource
operation.(structure)
Describes a tag key and optional value assigned to an Amazon Lightsail resource.
For more information about tags in Lightsail, see the Lightsail Dev Guide .
key -> (string)
The key of the tag.
Constraints: Tag keys accept a maximum of 128 letters, numbers, spaces in UTF-8, or the following characters: + - = . _ : / @
value -> (string)
The value of the tag.
Constraints: Tag values accept a maximum of 256 letters, numbers, spaces in UTF-8, or the following characters: + - = . _ : / @
Shorthand Syntax:
key=string,value=string ...
JSON Syntax:
[
{
"key": "string",
"value": "string"
}
...
]
--cli-input-json
| --cli-input-yaml
(string)
Reads arguments from the JSON string provided. The JSON string follows the format provided by --generate-cli-skeleton
. If other arguments are provided on the command line, those values will override the JSON-provided values. It is not possible to pass arbitrary binary values using a JSON-provided value as the string will be taken literally. This may not be specified along with --cli-input-yaml
.
--generate-cli-skeleton
(string)
Prints a JSON skeleton to standard output without sending an API request. If provided with no value or the value input
, prints a sample input JSON that can be used as an argument for --cli-input-json
. Similarly, if provided yaml-input
it will print a sample input YAML that can be used with --cli-input-yaml
. If provided with the value output
, it validates the command inputs and returns a sample output JSON for that command.
--cli-auto-prompt
(boolean)
Automatically prompt for CLI input parameters.
See ‘aws help’ for descriptions of global parameters.
To create a key pair
The following create-key-pair
example creates a key pair that you can use to authenticate and connect to an instance.
aws lightsail create-key-pair \
--key-pair-name MyPersonalKeyPair
The output provides the private key base64 value that you can use to authenticate to instances that use the created key pair. Note: Copy and paste the private key base64 value to a safe location because you cannot retrieve it later.
{
"keyPair": {
"name": "MyPersonalKeyPair",
"arn": "arn:aws:lightsail:us-west-2:111122223333:KeyPair/55025c71-198f-403b-b42f-a69433e724fb",
"supportCode": "621291663362/MyPersonalKeyPair",
"createdAt": 1569866556.567,
"location": {
"availabilityZone": "all",
"regionName": "us-west-2"
},
"resourceType": "KeyPair"
},
"publicKeyBase64": "ssh-rsa ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCV0xUEwx96amPERH7K1bVT1tTFl9OmNk6o7m5YVHk9xlOdMbDRbFvhtXvw4jzJXXz5pBMxWOaGMz5K8QyTVOznoqp13Z8SBooH29hgmBNXiII1XPzEwqbj8mfo1+YVM5s5VuxWwm+BHUgedGUXno6uF7agqxZNO1kPLJBIVTW26SSYBJ0tE+y804UyVsjrbUqCaMXDhmfXpWulMPwuXhwcKh7e8hwoTfkiX0E6Ql+KqF/MiA3w6DCjEqvvdIO7SiEZJFsuGNfYDDN3w60Rel5MUhmn3OJdn4y/A7NWb3IxL4pPfVE4rgFRKU8n1jp9kwRnlVMVBOWuGXk6n+H6M2f1 ",
"privateKeyBase64": "-----BEGIN RSA PRIVATE KEY-----EXAMPLETCCAfICCQD6m7oRw0uXOjANBgkqhkiG9w0BAQUFADCBiDELMAkGA1UEBhMC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\nNYiytVbZPQUQ5Yaxu2jXnimvw3rrszlaEXAMPLE=\n-----END RSA PRIVATE KEY-----",
"operation": {
"id": "67f984db-9994-45fe-ad38-59bafcaf82ef",
"resourceName": "MyPersonalKeyPair",
"resourceType": "KeyPair",
"createdAt": 1569866556.567,
"location": {
"availabilityZone": "all",
"regionName": "us-west-2"
},
"isTerminal": true,
"operationType": "CreateKeyPair",
"status": "Succeeded",
"statusChangedAt": 1569866556.704
}
}
keyPair -> (structure)
An array of key-value pairs containing information about the new key pair you just created.
name -> (string)
The friendly name of the SSH key pair.
arn -> (string)
The Amazon Resource Name (ARN) of the key pair (e.g.,
arn:aws:lightsail:us-east-2:123456789101:KeyPair/05859e3d-331d-48ba-9034-12345EXAMPLE
).supportCode -> (string)
The support code. Include this code in your email to support when you have questions about an instance or another resource in Lightsail. This code enables our support team to look up your Lightsail information more easily.
createdAt -> (timestamp)
The timestamp when the key pair was created (e.g.,
1479816991.349
).location -> (structure)
The region name and Availability Zone where the key pair was created.
availabilityZone -> (string)
The Availability Zone. Follows the format
us-east-2a
(case-sensitive).regionName -> (string)
The AWS Region name.
resourceType -> (string)
The resource type (usually
KeyPair
).tags -> (list)
The tag keys and optional values for the resource. For more information about tags in Lightsail, see the Lightsail Dev Guide .
(structure)
Describes a tag key and optional value assigned to an Amazon Lightsail resource.
For more information about tags in Lightsail, see the Lightsail Dev Guide .
key -> (string)
The key of the tag.
Constraints: Tag keys accept a maximum of 128 letters, numbers, spaces in UTF-8, or the following characters: + - = . _ : / @
value -> (string)
The value of the tag.
Constraints: Tag values accept a maximum of 256 letters, numbers, spaces in UTF-8, or the following characters: + - = . _ : / @
fingerprint -> (string)
The RSA fingerprint of the key pair.
publicKeyBase64 -> (string)
A base64-encoded public key of the
ssh-rsa
type.
privateKeyBase64 -> (string)
A base64-encoded RSA private key.
operation -> (structure)
An array of objects that describe the result of the action, such as the status of the request, the timestamp of the request, and the resources affected by the request.
id -> (string)
The ID of the operation.
resourceName -> (string)
The resource name.
resourceType -> (string)
The resource type.
createdAt -> (timestamp)
The timestamp when the operation was initialized (e.g.,
1479816991.349
).location -> (structure)
The AWS Region and Availability Zone.
availabilityZone -> (string)
The Availability Zone. Follows the format
us-east-2a
(case-sensitive).regionName -> (string)
The AWS Region name.
isTerminal -> (boolean)
A Boolean value indicating whether the operation is terminal.
operationDetails -> (string)
Details about the operation (e.g.,
Debian-1GB-Ohio-1
).operationType -> (string)
The type of operation.
status -> (string)
The status of the operation.
statusChangedAt -> (timestamp)
The timestamp when the status was changed (e.g.,
1479816991.349
).errorCode -> (string)
The error code.
errorDetails -> (string)
The error details.