yc iam access-key issue-ephemeral

Flag

Description

--subject-id

string

The subject identifier for whom the ephemeral access key will be created. If not specified, it defaults to the subject that made the request.

--session-name

string

Use the session name to uniquely identify a session when the same SA is impersonated by different principals or for different reasons.

--policy

string

AWS-compatible policy in JSON format that you want to use as an inline session policy.

--duration

duration

Duration, which specifies the duration of the temporary security credentials. Format 15m-12h.

--aws-profile

string

AWS profile name to store the ephemeral key under. When set, the key is written to the AWS credentials file instead of being printed to STDOUT. Defaults to 'default' when only --aws-credentials-file is set.

--aws-credentials-file

string

Path to the AWS credentials file to write the ephemeral key to. Defaults to the AWS_SHARED_CREDENTIALS_FILE environment variable or ~/.aws/credentials

Flag

Description

--profile

string

Set the custom configuration file.

--debug

Debug logging.

--debug-grpc

Debug gRPC logging. Very verbose, used for debugging connection problems.

--no-user-output

Disable printing user intended output to stderr.

--retry

int

Enable gRPC retries. By default, retries are enabled with maximum 5 attempts.
Pass 0 to disable retries. Pass any negative value for infinite retries.
Even infinite retries are capped with 2 minutes timeout.

--cloud-id

string

Set the ID of the cloud to use.

--folder-id

string

Set the ID of the folder to use.

--folder-name

string

Set the name of the folder to use (will be resolved to id).

--endpoint

string

Set the Cloud API endpoint (host:port).

--token

string

Set the OAuth token to use.

--impersonate-service-account-id

string

Set the ID of the service account to impersonate.

--no-browser

Disable opening browser for authentication.

--format

string

Set the output format: text (default), yaml, json, json-rest.

--jq

string

Query to select values from the response using jq syntax

-h, --help

Display help for the command.