Yandex Cloud
Search
Discuss with expertTry it for free
  • Customer Stories
  • Documentation
  • Blog
  • All Services
    • Cloud Interconnect
    • Cloud Backup
    • Cloud Registry
    • Yandex AI Studio
    • Compute Cloud
    • Object Storage
    • Managed Service for Kubernetes®
    • Yandex BareMetal
    • Smart Web Security
    • Security Deck
    • Managed Service for PostgreSQL
    • Managed Service for ClickHouse®
    • Monium
    • Cloud CDN
    • Network Load Balancer
    • Virtual Private Cloud
    • Cloud DNS
    • Application Load Balancer
    • Yandex Cloud Video
    • Stackland
    • Yandex Cloud Router
    • Yandex Managed Service for Trino
    • Managed Service for MySQL®
    • Managed Service for Valkey™
    • Managed Service for Apache Spark™
    • Yandex StoreDoc
    • Managed Service for OpenSearch
    • Managed Service for Apache Kafka®
    • Data Transfer
    • Yandex MPP Analytics Engine for PostgreSQL
    • Yandex Managed Service for Apache Airflow®
    • Data Processing
    • Yandex MetaData Hub
    • Managed Service for YDB
    • Managed Service for Sharded PostgreSQL
    • Managed Service for YTsaurus
    • Yandex WebSQL
    • DataLens
    • Yandex Search API
    • SpeechSense
    • SpeechKit
    • DataSphere
    • Vision OCR
    • Translate
    • Yandex Identity Hub
    • Key Management Service
    • Certificate Manager
    • Yandex Lockbox
    • Audit Trails
    • SmartCaptcha
    • Cloud Desktop
    • SourceCraft Code Assistant
    • Container Registry
    • Managed Service for GitLab
    • Managed Service for Prometheus®
    • Cloud Functions
    • API Gateway
    • Yandex Cloud Postbox
    • Message Queue
    • Serverless Integrations
    • IoT Core
    • Data Streams
    • Serverless Containers
    • Cloud Notification Service
    • Yandex Query
    • Identity and Access Management
    • Yandex Cloud Console
    • Resource Manager
    • Yandex Cloud Billing
    • Yandex Cloud Quota Manager
    • Cloud Apps
  • System Status
  • Marketplace
    • Featured
    • Infrastructure & Network
    • Data Platform
    • AI for business
    • Security
    • DevOps tools
    • Serverless
    • Monitoring & Resources
  • All Solutions
    • By industry
    • By use case
    • Economics and Pricing
    • Security
    • Technical Support
    • Start testing with double trial credits
    • Cloud credits to scale your IT product
    • Gateway to Russia
    • Cloud for Startups
    • Center for Technologies and Society
    • Yandex Cloud Partner program
    • Price calculator
    • Pricing plans
  • Customer Stories
  • Documentation
  • Blog
© 2026 Direct Cursus Technology L.L.C.
Command line interface
  • Getting started with the CLI
    • Overview
    • help
    • init
      • Overview
        • Overview
        • activate
        • add-access-binding
        • add-version
        • cancel-version-destruction
        • create
        • deactivate
        • delete
        • get
        • list
        • list-access-bindings
        • list-operations
        • list-versions
        • remove-access-binding
        • schedule-version-destruction
        • set-access-bindings
        • update
    • version
  • CLI releases
  • Troubleshooting
  1. CLI reference
  2. lockbox
  3. secret
  4. Overview

yc lockbox secret

Written by
Yandex Cloud
Updated at June 10, 2026
View in Markdown

Manage secrets

Command UsageCommand Usage

Syntax:

yc lockbox secret <command>

Command TreeCommand Tree

  • yc lockbox secret activate — Activate the specified secret

  • yc lockbox secret add-access-binding — Add access binding for the specified secret

  • yc lockbox secret add-version — Add new payload version for the specified secret based on an existing one

  • yc lockbox secret cancel-version-destruction — Cancel destruction of the specified secret version

  • yc lockbox secret create — Create a secret

  • yc lockbox secret deactivate — Deactivate the specified secret

  • yc lockbox secret delete — Delete the specified secret

  • yc lockbox secret get — Show information about the specified secret

  • yc lockbox secret list — List secrets for the specified folder

  • yc lockbox secret list-access-bindings — List access bindings for the specified secret

  • yc lockbox secret list-operations — List operations for the specified secret

  • yc lockbox secret list-versions — List versions for the specified secret

  • yc lockbox secret remove-access-binding — Remove access binding for the specified secret

  • yc lockbox secret schedule-version-destruction — Schedule destruction of the specified secret version

  • yc lockbox secret set-access-bindings — Set access bindings for the specified secret and delete all existing access bindings if there were any

  • yc lockbox secret update — Update the specified secret

Global FlagsGlobal Flags

Flag

Description

--profile

string

Set the custom configuration file.

--debug

Debug logging.

--debug-grpc

Debug gRPC logging. Very verbose, used for debugging connection problems.

--no-user-output

Disable printing user intended output to stderr.

--retry

int

Enable gRPC retries. By default, retries are enabled with maximum 5 attempts.
Pass 0 to disable retries. Pass any negative value for infinite retries.
Even infinite retries are capped with 2 minutes timeout.

--cloud-id

string

Set the ID of the cloud to use.

--folder-id

string

Set the ID of the folder to use.

--folder-name

string

Set the name of the folder to use (will be resolved to id).

--endpoint

string

Set the Cloud API endpoint (host:port).

--token

string

Set the OAuth token to use.

--impersonate-service-account-id

string

Set the ID of the service account to impersonate.

--no-browser

Disable opening browser for authentication.

--format

string

Set the output format: text (default), yaml, json, json-rest.

--jq

string

Query to select values from the response using jq syntax

-h, --help

Display help for the command.

Was the article helpful?

Previous
get
Next
activate
© 2026 Direct Cursus Technology L.L.C.