1 Answers
Indeed option3 looks the most comprehensive. For option 4, at the end of those steps, your data volume is still mounted onto the stopped instance.
For option 3 is not just do-able, but the only way to do back in the good ol’ days. It’s akin to taking out a hdd from an old computer put it into a external hdd drive, and then use a separate OS to change the authorized_keys file. Once you attach your root volume as a data volume on a separate EC2, you’ll have access to the files on that volume, hence you can simply add an additional key to the authorized_keys file, or even just replace the file completely.