http://docs.amazonwebservices.com/AWSEC2/latest/UserGuide/using-credentials.html#using-credentials-certificate

A document about three kinds of keys to access to EC2 instances.

A AWS user needs X.509 Certificate, which is a user's public key, to user AWS Command Line Tools.