Get started
Command line interface
  • Getting started with the CLI
  • Step-by-step instructions
  • Concepts
  • CLI releases
  • Troubleshooting
  • CLI reference
    • Overview
    • CLI manage
    • Operations manage
    • Service manage
      • ydb
      • certificate-manager
      • managed-clickhouse
      • cdn
      • dns
      • kms
      • resource-manager
      • backup
      • lockbox
      • managed-elasticsearch
      • load-balancer
      • application-load-balancer
      • dataproc
      • managed-kafka
      • managed-mysql
      • managed-sqlserver
      • vpc
      • managed-redis
      • managed-kubernetes
      • storage
      • compute
      • iam
      • managed-mongodb
      • managed-postgresql
      • iot
      • container
      • desktops
      • serverless
      • managed-greenplum
      • logging
      • datatransfer
      • organization-manager

yc iam key create

Written by

Create an IAM key for for authenticated account or the specified service account. Created key will be written to file in JSON format.

Command Usage

Syntax:

yc iam key create [Flags...] [Global Flags...]

Flags

Flag Description
-o,--output string
The path where the resulting IAM key should be written.
--user-account Key will be created for authenticated account.
--service-account-id string
service account id.
--service-account-name string
service account name.
--description string
Specifies a textual description of the service account.
--algorithm string
Specifies key algorithm. Otherwise server default will be used. Values: 'rsa-2048', 'rsa-4096'

Global Flags

Flag Description
--profile string
Set the custom configuration file.
--debug Debug logging.
--debug-grpc Debug gRPC logging. Very verbose, used for debugging connection problems.
--no-user-output Disable printing user intended output to stderr.
--retry int
Enable gRPC retries. By default, retries are enabled with maximum 5 attempts.
Pass 0 to disable retries. Pass any negative value for infinite retries.
Even infinite retries are capped with 2 minutes timeout.
--cloud-id string
Set the ID of the cloud to use.
--folder-id string
Set the ID of the folder to use.
--folder-name string
Set the name of the folder to use (will be resolved to id).
--endpoint string
Set the Cloud API endpoint (host:port).
--token string
Set the OAuth token to use.
--impersonate-service-account-id string
Set the ID of the service account to impersonate.
--format string
Set the output format: text (default), yaml, json, json-rest.
-h,--help Display help for the command.