Yandex Cloud
Search
Contact UsTry it for free
  • Customer Stories
  • Documentation
  • Blog
  • All Services
  • System Status
  • Marketplace
    • Featured
    • Infrastructure & Network
    • Data Platform
    • AI for business
    • Security
    • DevOps tools
    • Serverless
    • Monitoring & Resources
  • All Solutions
    • By industry
    • By use case
    • Economics and Pricing
    • Security
    • Technical Support
    • Start testing with double trial credits
    • Cloud credits to scale your IT product
    • Gateway to Russia
    • Cloud for Startups
    • Center for Technologies and Society
    • Yandex Cloud Partner program
    • Price calculator
    • Pricing plans
  • Customer Stories
  • Documentation
  • Blog
© 2026 Direct Cursus Technology L.L.C.
Yandex Audit Trails
  • Getting started
  • Access management
  • Pricing policy
  • Terraform reference
  • Monitoring metrics
  • Management event reference
  • Data event reference
      • AccessKeyLastUsed
      • AddFederatedUserAccounts
      • ApplicationLoginEvent
      • CheckSshPolicy
      • CreateAccessKey
      • CreateApiKey
      • CreateCertificate
      • CreateEphemeralAccessKey
      • CreateFederatedCredential
      • CreateFederation
      • CreateFederation
      • CreateIamCookieForSubject
      • CreateIamToken
      • CreateKey
      • CreateOAuthClient
      • CreateOAuthClientSecret
      • CreateRefreshTokenForSubject
      • CreateServiceAccount
      • CreateTemporaryAccessKey
      • CreateUserCredential
      • DeleteAccessKey
      • DeleteApiKey
      • DeleteCertificate
      • DeleteFederatedCredential
      • DeleteFederation
      • DeleteFederation
      • DeleteKey
      • DeleteOAuthClient
      • DeleteOAuthClientSecret
      • DeleteServiceAccount
      • DeleteUserCredential
      • DetectLeakedCredential
      • DisableService
      • EnableService
      • GenerateSshCertificate
      • RevokeIamToken
      • RevokeLeakedCredential
      • RevokeRefreshTokenForSubject
      • RevokeSsoSession
      • SetFederationAccessBindings
      • SetServiceAccountAccessBindings
      • UpdateAccessKey
      • UpdateApiKey
      • UpdateCertificate
      • UpdateFederation
      • UpdateFederation
      • UpdateFederationAccessBindings
      • UpdateKey
      • UpdateOAuthClient
      • UpdateServiceAccount
      • UpdateServiceAccountAccessBindings
      • UpdateUserCredential
      • VerifyUserCredential
  • Release notes

In this article:

  • Event JSON schema
  • Field description
  • ResourceMetadata
  • Resource
  • EventDetails
  1. Audit log reference
  2. iam
  3. AccessKeyLastUsed

Identity and Access Management Audit Trails Events: AccessKeyLastUsed

Written by
Yandex Cloud
Updated at April 15, 2026
  • Event JSON schema
  • Field description
  • ResourceMetadata
  • Resource
  • EventDetails

Event JSON schemaEvent JSON schema

{
  "eventId": "string",
  "eventSource": "string",
  "eventType": "string",
  "eventTime": "string",
  "resourceMetadata": {
    "path": [
      {
        "resourceType": "string",
        "resourceId": "string",
        // Includes only one of the fields `resourceName`
        "resourceName": "string"
        // end of the list of possible fields
      }
    ]
  },
  "eventStatus": "string",
  "details": {
    "accessKeyId": "string",
    "serviceAccountId": "string",
    "serviceAccountName": "string",
    "lastUsedAt": "string"
  }
}

Field descriptionField description

Field

Description

eventId

string

eventSource

string

eventType

string

eventTime

string (date-time)

String in RFC3339 text format. The range of possible values is from
0001-01-01T00:00:00Z to 9999-12-31T23:59:59.999999999Z, i.e. from 0 to 9 digits for fractions of a second.

To work with values in this field, use the APIs described in the
Protocol Buffers reference.
In some languages, built-in datetime utilities do not support nanosecond precision (9 digits).

resourceMetadata

ResourceMetadata

eventStatus

enum (SynchronousEventStatus)

  • ERROR
  • DONE

details

EventDetails

ResourceMetadataResourceMetadata

Field

Description

path[]

Resource

ResourceResource

Field

Description

resourceType

string

resourceId

string

resourceName

string

Includes only one of the fields resourceName.

EventDetailsEventDetails

Field

Description

accessKeyId

string

serviceAccountId

string

serviceAccountName

string

lastUsedAt

string (date-time)

String in RFC3339 text format. The range of possible values is from
0001-01-01T00:00:00Z to 9999-12-31T23:59:59.999999999Z, i.e. from 0 to 9 digits for fractions of a second.

To work with values in this field, use the APIs described in the
Protocol Buffers reference.
In some languages, built-in datetime utilities do not support nanosecond precision (9 digits).

Was the article helpful?

Previous
UpgradeInstance
Next
AddFederatedUserAccounts
© 2026 Direct Cursus Technology L.L.C.