A new employee joined a company where AWS CodeCommit manages code repositories in several AWS regions. In order to connect with CodeCommit by SSH, he installed the latest version of GIT in a Linux machine, created a key pair via ssh-keygen and uploaded the public key to the security credentials of his IAM user. However, he still cannot git clone any repositories using SSH. Which config file in ~/.ssh/ does he need to create in his Linux machine?

Answer options:

A.Host *
User IAMUSREIDEXAMPLE
IdentityFile ~/.ssh/id_rsa
B.Host git-codecommit.ap-south-1.amazonaws.com
User APKAXXXXXXXXXEXAMPLE
IdentityFile ~/.ssh/id_rsa
C.Host git-codecommit.*.amazonaws.com
User APKAXXXXXXXXXEXAMPLE
IdentityFile ~/.ssh/id_rsa
D.Host git-codecommit.*.amazonaws.com
User IAMUSREIDEXAMPLE
IdentityFile ~/.ssh/id_rsa.pub

Correct Answer – C
GIT SSH access is a commonly used method to connect with AWS CodeCommit from a remote server. Check
https://docs.aws.amazon.com/codecommit/latest/userguide/setting-up-ssh-unixes.html for the setup steps.
Option A is incorrect: Because the host should be limited as CodeCommit service rather than the wildcard.
Option B is incorrect: Because since CodeCommit is used in several regions, git-codecommit.ap-south-1.amazonaws.com is incorrect as it is limited in the region of ap-south-1.
Option C is CORRECT: Because this is the correct configuration settings for SSH connection.
Option D is incorrect: Because the value for User should be the SSH key ID that is in the IAM Security Credential tab as below: