EC2-GET-PASSWORD(1)
π¦ EC2-GET-PASSWORD π
okay bestie, so this is ec2-get-password, aka ec2gpass, from the EC2 API command line tools β a lil user command that goes and fetches the admin password for a Windows instance. yeah. we're doing Windows today. slay. π
β¨ SYNOPSIS β¨
ec2gpass ([ec2-get-password])
ec2gpass [GENERAL OPTIONS] INSTANCE -k KEYFILE
π GENERAL NOTES π
okay real talk, this one's important and it's giving "small print but make it fashion":
- Any command option/parameter may be passed a value of
-to indicate that values for that option should be read from stdin.
that's it. that's the note. stdin girlies rise up π«Ά
π DESCRIPTION π
So what does it do? It fetches and decrypts the Administrator password for a Windows instance. no cap.
Here's the vibe: the password is encrypted with the private key used when launching the instance. The result is Base64-encoded and emitted to the console output when the instance boots. This command retrieves the last such data emitted by the instance and decrypts the password. so like, it's not guessing β it's grabbing what the instance already spat out and unlocking it. πβ¨
And the KEYFILE parameter? That's a file containing the unencrypted PEM encoded PKCS#8 private key portion of the keypair specified when launching the instance. keep that file safe bestie, it's literally the whole point. ποΈ
πΈ GENERAL OPTIONS πΈ
one bullet per option, exactly as promised, no skipping, no summarising, we don't do that here:
-O,--aws-access-keyKEY β AWS Access Key ID. Defaults to the value of theAWS_ACCESS_KEYenvironment variable (if set).-W,--aws-secret-keyKEY β AWS Secret Access Key. Defaults to the value of theAWS_SECRET_KEYenvironment variable (if set).-T,--security-tokenTOKEN β AWS delegation token. Defaults to the value of theAWS_DELEGATION_TOKENenvironment variable (if set).-K,--private-keyKEY β [DEPRECATED] SpecifyKEYas the private key to use. Defaults to the value of theEC2_PRIVATE_KEYenvironment variable (if set). Overrides the default.-C,--certCERT β [DEPRECATED] SpecifyCERTas the X509 certificate to use. Defaults to the value of theEC2_CERTenvironment variable (if set). Overrides the default.-U,--urlURL β SpecifyURLas the web service URL to use. Defaults to the value of'https://ec2.amazonaws.com'(us-east-1) or to that of theEC2_URLenvironment variable (if set). Overrides the default.--regionREGION β SpecifyREGIONas the web service region to use. This option will override the URL specified by the"-U URL"option andEC2_URLenvironment variable. This option defaults to the region specified by theEC2_URLenvironment variable or us-east-1 if this environment variable is not set.-D,--auth-dry-runβ Check if you can perform the requested action rather than actually performing it.-v,--verboseβ Verbose output.-?,--helpβ Display this help.-H,--headersβ Display column headers.--debugβ Display additional debugging information.--show-empty-fieldsβ Indicate empty fields.--hide-tagsβ Do not display tags for tagged resources.--connection-timeoutTIMEOUT β Specify a connection timeoutTIMEOUT(in seconds).--request-timeoutTIMEOUT β Specify a request timeoutTIMEOUT(in seconds).
β οΈ heads up queen:-K/--private-keyand-C/--certare marked [DEPRECATED]. they still work, but the manpage is telling you they're old news. π
π§ SPECIFIC OPTIONS π§
the one that's actually about this command, the main character of the option list:
-k,--priv-launch-keyβ file containing the unencrypted PEM encoded PKCS#8 private key portion of the keypair specified when launching the instance.
this is the -k KEYFILE from the synopsis. it's giving "you literally cannot do this without me." π
π SEE ALSO π
go read the docs bestie, iykyk:
http://docs.amazonwebservices.com/AWSEC2/2014-05-01/CommandLineReferencehttp://docs.amazonwebservices.com/AWSEC2/latest/CommandLineReference
okay that's the whole page, you ate it, you're obsessed, periodt. π
this lil masterpiece is brought to you by the EC2 API command line tools, version 1.6.14.1, api=2014-05-01 β so if you're out here living in 2014-era EC2 land, this one's for you. mwah. πβ¨
π¦ where this page comes from
- ubuntu jammy: ec2-api-tools 1.6.14.1-0ubuntu1
- ubuntu noble: ec2-api-tools 1.6.14.1-0ubuntu2
- π girlified by deepseek-ai/DeepSeek-V4.1-Flash on : a language model's rewrite of the original, under its terms