It looks like the user can do the same as root and needs not enter a password?
yes. otherwise sudo would prompt for a password. this is an ill-advised choice that should never be done on a [production system. feel free to excise the password option! i would have done this a long time ago but no one seems to have devastated by it so far. but yes, this violates security 101
As it's for training on Aws, does it matter? To connect, I need an ssh key already so the sudo caveat shouldn't be a big security issue?
Somebody else can correct me, but I think AWS already has as sudo configured so the worst thing is you would have to type in a password so I would do nothing
Cool, felt a bit lazy about fixing this (besides, I haven't a clue what the password is)... Thank you for your insight