Yandex Cloud
Search
Contact UsTry it for free
  • Customer Stories
  • Documentation
  • Blog
  • All Services
  • System Status
    • Featured
    • Infrastructure & Network
    • Data Platform
    • Containers
    • Developer tools
    • Serverless
    • Security
    • Monitoring & Resources
    • AI for business
    • Business tools
  • All Solutions
    • By industry
    • By use case
    • Economics and Pricing
    • Security
    • Technical Support
    • Start testing with double trial credits
    • Cloud credits to scale your IT product
    • Gateway to Russia
    • Cloud for Startups
    • Center for Technologies and Society
    • Yandex Cloud Partner program
    • Price calculator
    • Pricing plans
  • Customer Stories
  • Documentation
  • Blog
© 2025 Direct Cursus Technology L.L.C.
Yandex Identity and Access Management
  • Secure use of Yandex Cloud
  • Access management
  • Pricing policy
  • Role reference
  • Terraform reference
    • API authentication
      • Overview
        • Overview
        • Get
        • List
        • Create
        • Update
        • Delete
        • ListOperations
  • Monitoring metrics
  • Audit Trails events
  • Release notes

In this article:

  • gRPC request
  • CreateKeyRequest
  • CreateKeyResponse
  • Key
  1. API reference
  2. gRPC
  3. Key
  4. Create

Identity and Access Management API, gRPC: KeyService.Create

Written by
Yandex Cloud
Updated at December 15, 2025
  • gRPC request
  • CreateKeyRequest
  • CreateKeyResponse
  • Key

Creates a key pair for the specified service account.

gRPC requestgRPC request

rpc Create (CreateKeyRequest) returns (CreateKeyResponse)

CreateKeyRequestCreateKeyRequest

{
  "service_account_id": "string",
  "description": "string",
  "format": "KeyFormat",
  "key_algorithm": "Algorithm"
}

Field

Description

service_account_id

string

ID of the service account to create a key pair for.
To get the service account ID, use a yandex.cloud.iam.v1.ServiceAccountService.List request.
If not specified, it defaults to the subject that made the request.

The maximum string length in characters is 50.

description

string

Description of the key pair.

The maximum string length in characters is 256.

format

enum KeyFormat

Output format of the key.

  • PEM_FILE: Privacy-Enhanced Mail (PEM) format. Default value.

key_algorithm

enum Algorithm

An algorithm used to generate a key pair of the Key resource.

  • RSA_2048: RSA with a 2048-bit key size. Default value.
  • RSA_4096: RSA with a 4096-bit key size.

CreateKeyResponseCreateKeyResponse

{
  "key": {
    "id": "string",
    // Includes only one of the fields `user_account_id`, `service_account_id`
    "user_account_id": "string",
    "service_account_id": "string",
    // end of the list of possible fields
    "created_at": "google.protobuf.Timestamp",
    "description": "string",
    "key_algorithm": "Algorithm",
    "public_key": "string",
    "last_used_at": "google.protobuf.Timestamp"
  },
  "private_key": "string"
}

Field

Description

key

Key

Key resource.

private_key

string

A private key of the Key resource.
This key must be stored securely.

KeyKey

A Key resource. For more information, see Authorized keys.

Field

Description

id

string

ID of the Key resource.

user_account_id

string

ID of the user account that the Key resource belongs to.

Includes only one of the fields user_account_id, service_account_id.

service_account_id

string

ID of the service account that the Key resource belongs to.

Includes only one of the fields user_account_id, service_account_id.

created_at

google.protobuf.Timestamp

Creation timestamp.

description

string

Description of the Key resource. 0-256 characters long.

key_algorithm

enum Algorithm

An algorithm used to generate a key pair of the Key resource.

  • RSA_2048: RSA with a 2048-bit key size. Default value.
  • RSA_4096: RSA with a 4096-bit key size.

public_key

string

A public key of the Key resource.

last_used_at

google.protobuf.Timestamp

Timestamp for the last use of this key.

Was the article helpful?

Previous
List
Next
Update
© 2025 Direct Cursus Technology L.L.C.