$ sudo chmod 600 /path/to/my/key.pem
chmod 400 /Users/username/.ssh/id_rsa
chmod 400 {keyfile}.pem is what amazon instructed and it works.