OAuth token

In Yandex Cloud, an OAuth token is used to authenticate users with a Yandex account: the user exchanges an OAuth token for an Identity and Access Management token.

You can get an OAuth token to work with Yandex Cloud by sending a request to Yandex OAuth.

OAuth tokens are not available for federated users and service accounts.

OAuth token formatOAuth token format

The token always starts with a y, a random number in the 0-3 range, and an underscore (_). Other characters may include:

• Latin letters.
• Numbers.
• Underscores (_) and hyphens (-).

For example, an OAuth token may look like this: y3_Vdheub7w9bIut67GHeL345gfb5GAnd3dZnf08FRbvjeUFvetYiohGvc.

LifetimeLifetime

An OAuth token lives 12 months. After that, you need to get a new one and get authenticated again.

Services and utilities that support OAuth token authenticationServices and utilities that support OAuth token authentication

These services and utilities can request an IAM token automatically, so you can only specify an OAuth token for authentication:

• Yandex Cloud CLI
• Yandex Container Registry
• Terraform
• Packer
• GitLab CI

See alsoSee also

• Learn more about Yandex OAuth here.