Identity and Access Management Audit Trails Events: RevokeLeakedCredential

Статья создана

Обновлена 15 апреля 2026 г.

Event JSON schema
Field description
IamAuthentication
IamTokenInfo
Authorization
ResourceMetadata
Resource
RequestMetadata
Status
EventDetails
IamToken
UserAccount
ServiceAccount
IamCookie
IamApiKey
PassportOauthToken
IamAccessKey
IamKey
SmartCaptchaServerKey
LockboxSecret
IamRefreshToken
IamOAuthClientSecret
Subject

Event JSON schema

{
  "eventId": "string",
  "eventSource": "string",
  "eventType": "string",
  "eventTime": "string",
  "authentication": {
    "authenticated": "boolean",
    // Includes only one of the fields `subjectType`
    "subjectType": "string",
    // end of the list of possible fields
    // Includes only one of the fields `subjectId`
    "subjectId": "string",
    // end of the list of possible fields
    // Includes only one of the fields `subjectName`
    "subjectName": "string",
    // end of the list of possible fields
    // Includes only one of the fields `federationId`
    "federationId": "string",
    // end of the list of possible fields
    // Includes only one of the fields `federationName`
    "federationName": "string",
    // end of the list of possible fields
    // Includes only one of the fields `federationType`
    "federationType": "string",
    // end of the list of possible fields
    "tokenInfo": {
      "maskedIamToken": "string",
      // Includes only one of the fields `iamTokenId`
      "iamTokenId": "string",
      // end of the list of possible fields
      // Includes only one of the fields `impersonatorId`
      "impersonatorId": "string",
      // end of the list of possible fields
      // Includes only one of the fields `impersonatorType`
      "impersonatorType": "string",
      // end of the list of possible fields
      // Includes only one of the fields `impersonatorName`
      "impersonatorName": "string",
      // end of the list of possible fields
      // Includes only one of the fields `impersonatorFederationId`
      "impersonatorFederationId": "string",
      // end of the list of possible fields
      // Includes only one of the fields `impersonatorFederationName`
      "impersonatorFederationName": "string",
      // end of the list of possible fields
      // Includes only one of the fields `impersonatorFederationType`
      "impersonatorFederationType": "string"
      // end of the list of possible fields
    }
  },
  "authorization": {
    "authorized": "boolean"
  },
  "resourceMetadata": {
    "path": [
      {
        "resourceType": "string",
        "resourceId": "string",
        // Includes only one of the fields `resourceName`
        "resourceName": "string"
        // end of the list of possible fields
      }
    ]
  },
  "requestMetadata": {
    "remoteAddress": "string",
    "userAgent": "string",
    "requestId": "string",
    // Includes only one of the fields `remotePort`
    "remotePort": "string"
    // end of the list of possible fields
  },
  "eventStatus": "string",
  "error": {
    "code": "integer",
    "message": "string",
    "details": [
      "object"
    ]
  },
  "details": {
    "url": "string",
    // Includes only one of the fields `yandexCloudIamToken`, `yandexCloudIamCookie`, `yandexCloudIamApiKey`, `yandexCloudPassportOauthToken`, `yandexCloudIamAccessKey`, `yandexCloudIamKey`, `yandexCloudSmartcaptchaServerKey`, `yandexCloudLockboxSecret`, `yandexCloudIamRefreshToken`, `yandexCloudIamOauthClientSecret`
    "yandexCloudIamToken": {
      "iamTokenPart": "string",
      "iamTokenHash": "string",
      "expired": "boolean",
      // Includes only one of the fields `userAccount`, `serviceAccount`
      "userAccount": {
        "userAccountId": "string",
        "federationId": "string"
      },
      "serviceAccount": {
        "serviceAccountId": "string"
      }
      // end of the list of possible fields
    },
    "yandexCloudIamCookie": {
      "iamCookiePart": "string",
      "iamCookieHash": "string",
      "expired": "boolean",
      // Includes only one of the fields `userAccount`
      "userAccount": {
        "userAccountId": "string",
        "federationId": "string"
      }
      // end of the list of possible fields
    },
    "yandexCloudIamApiKey": {
      "iamApiKeyPart": "string",
      "keyId": "string",
      // Includes only one of the fields `serviceAccount`
      "serviceAccount": {
        "serviceAccountId": "string"
      }
      // end of the list of possible fields
    },
    "yandexCloudPassportOauthToken": {
      "passportOauthTokenPart": "string",
      // Includes only one of the fields `userAccount`
      "userAccount": {
        "userAccountId": "string",
        "federationId": "string"
      }
      // end of the list of possible fields
    },
    "yandexCloudIamAccessKey": {
      "keyId": "string",
      // Includes only one of the fields `serviceAccount`
      "serviceAccount": {
        "serviceAccountId": "string"
      }
      // end of the list of possible fields
    },
    "yandexCloudIamKey": {
      "keyId": "string",
      // Includes only one of the fields `serviceAccount`, `userAccount`
      "serviceAccount": {
        "serviceAccountId": "string"
      },
      "userAccount": {
        "userAccountId": "string",
        "federationId": "string"
      }
      // end of the list of possible fields
    },
    "yandexCloudSmartcaptchaServerKey": {
      "folderId": "string",
      "captchaId": "string",
      "clientKey": "string",
      "serverKeyPart": "string"
    },
    "yandexCloudLockboxSecret": {
      "secretId": "string",
      "versionId": "string",
      "keyId": "string"
    },
    "yandexCloudIamRefreshToken": {
      "iamRefreshTokenPart": "string",
      "iamRefreshTokenHash": "string",
      "keyId": "string",
      // Includes only one of the fields `userAccount`
      "userAccount": {
        "userAccountId": "string",
        "federationId": "string"
      }
      // end of the list of possible fields
    },
    "yandexCloudIamOauthClientSecret": {
      "folderId": "string",
      "secretId": "string",
      "clientId": "string"
    },
    // end of the list of possible fields
    "subject": {
      "subjectType": "string",
      "subjectId": "string",
      "subjectName": "string"
    }
  },
  "requestParameters": "object",
  "response": "object"
}

Field description

Field	Description
eventId	string
eventSource	string
eventType	string
eventTime	string (date-time) String in RFC3339 text format. The range of possible values is from `0001-01-01T00:00:00Z` to `9999-12-31T23:59:59.999999999Z`, i.e. from 0 to 9 digits for fractions of a second. To work with values in this field, use the APIs described in the Protocol Buffers reference. In some languages, built-in datetime utilities do not support nanosecond precision (9 digits).
authentication	IamAuthentication
authorization	Authorization
resourceMetadata	ResourceMetadata
requestMetadata	RequestMetadata
eventStatus	enum (EventStatus) `STARTED` `ERROR` `DONE` `CANCELLED` `RUNNING`
error	Status The error result of the operation in case of failure or cancellation.
details	EventDetails
requestParameters	object
response	object

IamAuthentication

Field	Description
authenticated	boolean
subjectType	enum (IamSubjectType) Includes only one of the fields `subjectType`. `YANDEX_PASSPORT_USER_ACCOUNT` `SERVICE_ACCOUNT` `FEDERATED_USER_ACCOUNT` `SSH_USER` `KUBERNETES_USER`
subjectId	string Includes only one of the fields `subjectId`.
subjectName	string Includes only one of the fields `subjectName`.
federationId	string Includes only one of the fields `federationId`.
federationName	string Includes only one of the fields `federationName`.
federationType	enum (FederationType) Includes only one of the fields `federationType`. `GLOBAL_FEDERATION` `PRIVATE_FEDERATION`
tokenInfo	IamTokenInfo

IamTokenInfo

Field	Description
maskedIamToken	string
iamTokenId	string Includes only one of the fields `iamTokenId`.
impersonatorId	string Includes only one of the fields `impersonatorId`.
impersonatorType	enum (IamSubjectType) Includes only one of the fields `impersonatorType`. `YANDEX_PASSPORT_USER_ACCOUNT` `SERVICE_ACCOUNT` `FEDERATED_USER_ACCOUNT` `SSH_USER` `KUBERNETES_USER`
impersonatorName	string Includes only one of the fields `impersonatorName`.
impersonatorFederationId	string Includes only one of the fields `impersonatorFederationId`.
impersonatorFederationName	string Includes only one of the fields `impersonatorFederationName`.
impersonatorFederationType	enum (FederationType) Includes only one of the fields `impersonatorFederationType`. `GLOBAL_FEDERATION` `PRIVATE_FEDERATION`

Authorization

Field	Description
authorized	boolean

ResourceMetadata

Field	Description
path[]	Resource

Resource

Field	Description
resourceType	string
resourceId	string
resourceName	string Includes only one of the fields `resourceName`.

RequestMetadata

Field	Description
remoteAddress	string
userAgent	string
requestId	string
remotePort	string (int64) Includes only one of the fields `remotePort`.

Status

The error result of the operation in case of failure or cancellation.

Field	Description
code	integer (int32) Error code. An enum value of google.rpc.Code.
message	string An error message.
details[]	object A list of messages that carry the error details.

EventDetails

Field	Description
url	string
yandexCloudIamToken	IamToken Includes only one of the fields `yandexCloudIamToken`, `yandexCloudIamCookie`, `yandexCloudIamApiKey`, `yandexCloudPassportOauthToken`, `yandexCloudIamAccessKey`, `yandexCloudIamKey`, `yandexCloudSmartcaptchaServerKey`, `yandexCloudLockboxSecret`, `yandexCloudIamRefreshToken`, `yandexCloudIamOauthClientSecret`.
yandexCloudIamCookie	IamCookie Includes only one of the fields `yandexCloudIamToken`, `yandexCloudIamCookie`, `yandexCloudIamApiKey`, `yandexCloudPassportOauthToken`, `yandexCloudIamAccessKey`, `yandexCloudIamKey`, `yandexCloudSmartcaptchaServerKey`, `yandexCloudLockboxSecret`, `yandexCloudIamRefreshToken`, `yandexCloudIamOauthClientSecret`.
yandexCloudIamApiKey	IamApiKey Includes only one of the fields `yandexCloudIamToken`, `yandexCloudIamCookie`, `yandexCloudIamApiKey`, `yandexCloudPassportOauthToken`, `yandexCloudIamAccessKey`, `yandexCloudIamKey`, `yandexCloudSmartcaptchaServerKey`, `yandexCloudLockboxSecret`, `yandexCloudIamRefreshToken`, `yandexCloudIamOauthClientSecret`.
yandexCloudPassportOauthToken	PassportOauthToken Includes only one of the fields `yandexCloudIamToken`, `yandexCloudIamCookie`, `yandexCloudIamApiKey`, `yandexCloudPassportOauthToken`, `yandexCloudIamAccessKey`, `yandexCloudIamKey`, `yandexCloudSmartcaptchaServerKey`, `yandexCloudLockboxSecret`, `yandexCloudIamRefreshToken`, `yandexCloudIamOauthClientSecret`.
yandexCloudIamAccessKey	IamAccessKey Includes only one of the fields `yandexCloudIamToken`, `yandexCloudIamCookie`, `yandexCloudIamApiKey`, `yandexCloudPassportOauthToken`, `yandexCloudIamAccessKey`, `yandexCloudIamKey`, `yandexCloudSmartcaptchaServerKey`, `yandexCloudLockboxSecret`, `yandexCloudIamRefreshToken`, `yandexCloudIamOauthClientSecret`.
yandexCloudIamKey	IamKey Includes only one of the fields `yandexCloudIamToken`, `yandexCloudIamCookie`, `yandexCloudIamApiKey`, `yandexCloudPassportOauthToken`, `yandexCloudIamAccessKey`, `yandexCloudIamKey`, `yandexCloudSmartcaptchaServerKey`, `yandexCloudLockboxSecret`, `yandexCloudIamRefreshToken`, `yandexCloudIamOauthClientSecret`.
yandexCloudSmartcaptchaServerKey	SmartCaptchaServerKey Includes only one of the fields `yandexCloudIamToken`, `yandexCloudIamCookie`, `yandexCloudIamApiKey`, `yandexCloudPassportOauthToken`, `yandexCloudIamAccessKey`, `yandexCloudIamKey`, `yandexCloudSmartcaptchaServerKey`, `yandexCloudLockboxSecret`, `yandexCloudIamRefreshToken`, `yandexCloudIamOauthClientSecret`.
yandexCloudLockboxSecret	LockboxSecret Includes only one of the fields `yandexCloudIamToken`, `yandexCloudIamCookie`, `yandexCloudIamApiKey`, `yandexCloudPassportOauthToken`, `yandexCloudIamAccessKey`, `yandexCloudIamKey`, `yandexCloudSmartcaptchaServerKey`, `yandexCloudLockboxSecret`, `yandexCloudIamRefreshToken`, `yandexCloudIamOauthClientSecret`.
yandexCloudIamRefreshToken	IamRefreshToken Includes only one of the fields `yandexCloudIamToken`, `yandexCloudIamCookie`, `yandexCloudIamApiKey`, `yandexCloudPassportOauthToken`, `yandexCloudIamAccessKey`, `yandexCloudIamKey`, `yandexCloudSmartcaptchaServerKey`, `yandexCloudLockboxSecret`, `yandexCloudIamRefreshToken`, `yandexCloudIamOauthClientSecret`.
yandexCloudIamOauthClientSecret	IamOAuthClientSecret Includes only one of the fields `yandexCloudIamToken`, `yandexCloudIamCookie`, `yandexCloudIamApiKey`, `yandexCloudPassportOauthToken`, `yandexCloudIamAccessKey`, `yandexCloudIamKey`, `yandexCloudSmartcaptchaServerKey`, `yandexCloudLockboxSecret`, `yandexCloudIamRefreshToken`, `yandexCloudIamOauthClientSecret`.
subject	Subject

IamToken

Field	Description
iamTokenPart	string
iamTokenHash	string
expired	boolean
userAccount	UserAccount Includes only one of the fields `userAccount`, `serviceAccount`.
serviceAccount	ServiceAccount Includes only one of the fields `userAccount`, `serviceAccount`.

UserAccount

Field	Description
userAccountId	string
federationId	string

ServiceAccount

Field	Description
serviceAccountId	string

IamCookie

Field	Description
iamCookiePart	string
iamCookieHash	string
expired	boolean
userAccount	UserAccount Includes only one of the fields `userAccount`.

IamApiKey

Field	Description
iamApiKeyPart	string
keyId	string
serviceAccount	ServiceAccount Includes only one of the fields `serviceAccount`.

PassportOauthToken

Field

Description

passportOauthTokenPart

string

userAccount

UserAccount

Includes only one of the fields userAccount.

IamAccessKey

Field

Description

keyId

string

serviceAccount

ServiceAccount

Includes only one of the fields serviceAccount.

IamKey

Field	Description
keyId	string
serviceAccount	ServiceAccount Includes only one of the fields `serviceAccount`, `userAccount`.
userAccount	UserAccount Includes only one of the fields `serviceAccount`, `userAccount`.

SmartCaptchaServerKey

Field	Description
folderId	string
captchaId	string
clientKey	string
serverKeyPart	string

LockboxSecret

Field	Description
secretId	string
versionId	string
keyId	string

IamRefreshToken

Field	Description
iamRefreshTokenPart	string
iamRefreshTokenHash	string
keyId	string
userAccount	UserAccount Includes only one of the fields `userAccount`.

IamOAuthClientSecret

Field	Description
folderId	string
secretId	string
clientId	string

Subject

Field	Description
subjectType	enum (SubjectType) `YANDEX_PASSPORT_USER_ACCOUNT` `SERVICE_ACCOUNT` `FEDERATED_USER_ACCOUNT`
subjectId	string The maximum string length in characters is 50.
subjectName	string

Identity and Access Management Audit Trails Events: RevokeLeakedCredential

Event JSON schemaEvent JSON schema

Field descriptionField description

IamAuthenticationIamAuthentication

IamTokenInfoIamTokenInfo

AuthorizationAuthorization

ResourceMetadataResourceMetadata

ResourceResource

RequestMetadataRequestMetadata

StatusStatus

EventDetailsEventDetails

IamTokenIamToken

UserAccountUserAccount

ServiceAccountServiceAccount

IamCookieIamCookie

IamApiKeyIamApiKey

PassportOauthTokenPassportOauthToken

IamAccessKeyIamAccessKey

IamKeyIamKey

SmartCaptchaServerKeySmartCaptchaServerKey

LockboxSecretLockboxSecret

IamRefreshTokenIamRefreshToken

IamOAuthClientSecretIamOAuthClientSecret

SubjectSubject

Была ли статья полезна?