I launched an instance on EC2 with a Debian 7.6 AMI and the system log is empty. Is that by design? With the ubuntu images, the server's ssh keys were accessible via the system log. What is the procedure for verifying the server fingerprint on debian? Must I generate and add my own key, with user data? I'd sure prefer not to do that.
Presumming you are talking about the ssh host key (and not keys for user accounts).
I suppose it depends on how the installation was performed. Most Linux systems will generate new ssh host keys when sshd is initially started. Interesting in that I thought these keys were in a specific file and not contained in any log file. Perhaps the ssh package was not automatically installed with that version of the instance?
BTW, ssh keys (public and private) for specific accounts would need to be manually generated and installed.
This is a bug in the debian HVM images.