feat(ec2): support creating key pairs

[laurelmay]

This adds support for creating AWS::EC2::KeyPair resources. These are added as a property to Instance, LaunchTemplate, and NatInstance and the older keyName prop is deprecated in favor of the new keyPair: IKeyPair property.

A getter is added to retrieve the SSM parameter that hold the private key for non-imported keys and checks are added to make sure that ED25519 keys are not used with a Windows instance.

Closes #5252.

---

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license

[AllanOricil]

@kylelaker how can I use it locally before they merge it?

[laurelmay]

@kylelaker how can I use it locally before they merge it?

@AllanOricil The CfnKeyPair L1 resource already exists. So you can still use that according to the docs and pass its ref attribute in as keyName. Something like:

const keyPair = new ec2.CfnKeyPair(this, 'KeyPair', {
  KeyName: "A-NAME-FOR-KEY",
});

const keyName = keyPair.ref;

And you can pass keyName into anything that accepts that. Since the key material is put into SSM by CloudFormation, you can still access that using the pattern described in the docs.

[AllanOricil]

@kylelaker thank you! That is exactly what I used! I love cdk!

[mergify]

Thank you for contributing! Your pull request will be updated from main and then merged automatically (do not update manually, and be sure to allow changes to be pushed to your fork).

[mergify]

Thank you for contributing! Your pull request will be updated from main and then merged automatically (do not update manually, and be sure to allow changes to be pushed to your fork).

[aws-cdk-automation]

AWS CodeBuild CI Report

• CodeBuild project: AutoBuildv2Project1C6BFA3F-wQm2hXv2jqQv
• Commit ID: 86c215d
• Result: SUCCEEDED
• Build Logs (available for 30 days)

Powered by github-codebuild-logs, available on the AWS Serverless Application Repository

[mergify]

Thank you for contributing! Your pull request will be updated from main and then merged automatically (do not update manually, and be sure to allow changes to be pushed to your fork).