Key pairs vs SSM Session Manager

Two ways into an instance, an SSH key pair through port 22 or Session Manager through the SSM agent. Understand what each half of a key pair does, how Session Manager authenticates by IAM over an outbound channel, and how to choose between them for a given operational constraint.