Skip to content

Files

Latest commit

 

History

History
43 lines (31 loc) · 1.46 KB

digitalocean-compute-use-ssh-keys.md

File metadata and controls

43 lines (31 loc) · 1.46 KB

Pattern: Missing use of SSH keys for DigitalOcean compute

Issue: -

Description

When working with a server, you’ll likely spend most of your time in a terminal session connected to your server through SSH. A more secure alternative to password-based logins, SSH keys use encryption to provide a secure way of logging into your server and are recommended for all users.

Resolution: Use SSH keys for login.

Examples

The following example will fail the digitalocean-compute-use-ssh-keys check.

 resource "digitalocean_droplet" "good_example" {
 	image    = "ubuntu-18-04-x64"
 	name     = "web-1"
 	region   = "nyc2"
 	size     = "s-1vcpu-1gb"
  }

The following example will pass the digitalocean-compute-use-ssh-keys check.

 data "digitalocean_ssh_key" "terraform" {
 	name = "myKey"
   }
   
 resource "digitalocean_droplet" "good_example" {
 	image    = "ubuntu-18-04-x64"
 	name     = "web-1"
 	region   = "nyc2"
 	size     = "s-1vcpu-1gb"
 	ssh_keys = [ data.digitalocean_ssh_key.myKey.id ]
 }

Further reading