yc iam access-key issue-ephemeral

Flag

Description

--subject-id

string

The subject identifier for whom the ephemeral access key will be created. If not specified, it defaults to the subject that made the request.

--session-name

string

Use the session name to uniquely identify a session when the same SA is impersonated by different principals or for different reasons.

--policy

string

AWS-compatible policy in JSON format that you want to use as an inline session policy.

--duration

duration

Duration, which specifies the duration of the temporary security credentials. Format 15m-12h.

Flag

Description

--profile

string

Set the custom configuration file.

--debug

Debug logging.

--debug-grpc

Debug gRPC logging. Very verbose, used for debugging connection problems.

--no-user-output

Disable printing user intended output to stderr.

--retry

int

Enable gRPC retries. By default, retries are enabled with maximum 5 attempts.
Pass 0 to disable retries. Pass any negative value for infinite retries.
Even infinite retries are capped with 2 minutes timeout.

--cloud-id

string

Set the ID of the cloud to use.

--folder-id

string

Set the ID of the folder to use.

--folder-name

string

Set the name of the folder to use (will be resolved to id).

--endpoint

string

Set the Cloud API endpoint (host:port).

--token

string

Set the OAuth token to use.

--impersonate-service-account-id

string

Set the ID of the service account to impersonate.

--no-browser

Disable opening browser for authentication.

--format

string

Set the output format: text (default), yaml, json, json-rest.

--jq

string

Query to select values from the response using jq syntax

-h, --help

Display help for the command.