[ec2] logging into instance via transmit

[Scott Frazer]

On Wed, Jun 10, 2009 at 7:47 PM, Micah Walter<micahwalter at me.com> wrote:
> anyway, the thinking here is that I can just give a few select people
> the key-pair so they can log in as ubuntu via transmit and upload any
> files without having to worry about SSHing and setting permissions...
>
> is there any obvious security issue doing this, other than the obvious
> one where I am handing out a key to someone other than myself?

If you hand out the key that's attached to the "ubuntu" user, then you
are also handing out the ability to gain root over the box (a simple
ssh / sudo -s and they are in)

As has been suggested already, a much better idea is to create a
separate user and create a separate key pair for them.