DELETE default ubuntu user

As this is an EC2 question, the short answer is “No, you do not need to delete the default user”.

There are two primary reasons for this:

  1. Port 22 should be limited via the security policy that the EC2 instance(s) are using. If SSH is open to 0.0.0.0 then something needs to be changed. Immediately.
  2. Even if people know the account name, they will need the .pem private key file that you have associated with the instance(s).

You certainly can change or remove accounts from EC2 instances, but you shouldn’t need to.