Yandex Cloud
Search
Contact UsGet started
  • Blog
  • Pricing
  • Documentation
  • All Services
  • System Status
    • Featured
    • Infrastructure & Network
    • Data Platform
    • Containers
    • Developer tools
    • Serverless
    • Security
    • Monitoring & Resources
    • ML & AI
    • Business tools
  • All Solutions
    • By industry
    • By use case
    • Economics and Pricing
    • Security
    • Technical Support
    • Customer Stories
    • Start testing with double trial credits
    • Cloud credits to scale your IT product
    • Gateway to Russia
    • Cloud for Startups
    • Education and Science
    • Yandex Cloud Partner program
  • Blog
  • Pricing
  • Documentation
© 2025 Direct Cursus Technology L.L.C.
Yandex Identity and Access Management
  • Secure use of Yandex Cloud
  • Access management
  • Pricing policy
  • Role reference
  • Terraform reference
    • Authentication with the API
      • Overview
        • Overview
        • Get
        • List
        • Create
        • Update
        • Delete
        • ListOperations
  • Monitoring metrics
  • Audit Trails events
  • Release notes

In this article:

  • gRPC request
  • CreateKeyRequest
  • CreateKeyResponse
  • Key
  1. API reference
  2. gRPC
  3. Key
  4. Create

Identity and Access Management API, gRPC: KeyService.Create

Written by
Yandex Cloud
Updated at November 26, 2024
  • gRPC request
  • CreateKeyRequest
  • CreateKeyResponse
  • Key

Creates a key pair for the specified service account.

gRPC request

rpc Create (CreateKeyRequest) returns (CreateKeyResponse)

CreateKeyRequest

{
  "service_account_id": "string",
  "description": "string",
  "format": "KeyFormat",
  "key_algorithm": "Algorithm"
}

Field

Description

service_account_id

string

ID of the service account to create a key pair for.
To get the service account ID, use a yandex.cloud.iam.v1.ServiceAccountService.List request.
If not specified, it defaults to the subject that made the request.

description

string

Description of the key pair.

format

enum KeyFormat

Output format of the key.

  • PEM_FILE: Privacy-Enhanced Mail (PEM) format. Default value.

key_algorithm

enum Algorithm

An algorithm used to generate a key pair of the Key resource.

  • ALGORITHM_UNSPECIFIED
  • RSA_2048: RSA with a 2048-bit key size. Default value.
  • RSA_4096: RSA with a 4096-bit key size.

CreateKeyResponse

{
  "key": {
    "id": "string",
    // Includes only one of the fields `user_account_id`, `service_account_id`
    "user_account_id": "string",
    "service_account_id": "string",
    // end of the list of possible fields
    "created_at": "google.protobuf.Timestamp",
    "description": "string",
    "key_algorithm": "Algorithm",
    "public_key": "string",
    "last_used_at": "google.protobuf.Timestamp"
  },
  "private_key": "string"
}

Field

Description

key

Key

Key resource.

private_key

string

A private key of the Key resource.
This key must be stored securely.

Key

A Key resource. For more information, see Authorized keys.

Field

Description

id

string

ID of the Key resource.

user_account_id

string

ID of the user account that the Key resource belongs to.

Includes only one of the fields user_account_id, service_account_id.

service_account_id

string

ID of the service account that the Key resource belongs to.

Includes only one of the fields user_account_id, service_account_id.

created_at

google.protobuf.Timestamp

Creation timestamp.

description

string

Description of the Key resource. 0-256 characters long.

key_algorithm

enum Algorithm

An algorithm used to generate a key pair of the Key resource.

  • ALGORITHM_UNSPECIFIED
  • RSA_2048: RSA with a 2048-bit key size. Default value.
  • RSA_4096: RSA with a 4096-bit key size.

public_key

string

A public key of the Key resource.

last_used_at

google.protobuf.Timestamp

Timestamp for the last use of this key.

Was the article helpful?

Previous
List
Next
Update
© 2025 Direct Cursus Technology L.L.C.