diff --git a/aws.scm b/aws.scm
index 9c9206c..cfda09d 100644
--- a/aws.scm
+++ b/aws.scm
@@ -119,7 +119,7 @@
   (users (cons (user-account
                  (name "aws")
                  (group "admin")
-                 (password (crypt "root" "$6$salt"))
+                 (password (crypt "aws" "$6$salt"))
                  (shell (file-append zsh "/bin/zsh"))) %base-user-accounts))
 
   (sudoers-file (plain-file "sudoers"
@@ -134,5 +134,5 @@
    (cons* (service dhcp-client-service-type)
           (service aws-pubkey-service-type)
           (service openssh-service-type
-                   (openssh-configuration (port-number 22))) %base-services)))
+                   (openssh-configuration (port-number 22) (password-authentication? #f))) %base-services)))