[Yandex Cloud documentation](../index.md) > Yandex Identity and Access Management > Identity and Access Management # Yandex Identity and Access Management ## Getting started - [Overview](quickstart-overview.md) - [How to manage access to resources](quickstart.md) - [How to work with service accounts](quickstart-sa.md) ## Step-by-step guides - [All guides](operations/index.md) - [Handling secrets that are available in the public domain](operations/compromised-credentials.md) - [Users](../organization/operations/manage-users.md) - [User groups](../organization/operations/manage-groups.md) ### Service accounts - [Creating a service account](operations/sa/create.md) - [Viewing the folder's service accounts](operations/sa/list-get.md) - [Updating a service account](operations/sa/update.md) - [Assigning roles to a service account](operations/sa/assign-role-for-sa.md) - [Setting up service account access permissions](operations/sa/set-access-bindings.md) - [Using impersonation](operations/sa/impersonate-sa.md) - [Getting service account info](operations/sa/get-id.md) - [Getting an ID token for a service account](operations/sa/get-id-token.md) - [Deleting a service account](operations/sa/delete.md) ### Access policies - [Getting a list of supported policy templates](operations/access-policies/list.md) - [Creating a policy for a resource](operations/access-policies/assign.md) - [Viewing policies created for a resource](operations/access-policies/view-assigned.md) - [Delete policy](operations/access-policies/revoke.md) ### Roles - [Assigning roles](operations/roles/grant.md) - [Viewing assigned roles](operations/roles/get-assigned-roles.md) - [Revoking a role](operations/roles/revoke.md) ### Authentication #### IAM tokens - [Getting an IAM token for a Yandex account](operations/iam-token/create.md) - [Getting an IAM token for a service account](operations/iam-token/create-for-sa.md) - [Getting an IAM token for a federated account](operations/iam-token/create-for-federation.md) - [Getting an IAM token for a local user account](operations/iam-token/create-for-local.md) - [Revoking an IAM token](operations/iam-token/revoke-iam-token.md) ##### Refresh tokens - [Getting a list of refresh tokens](operations/refresh-token/list.md) - [Revoking a refresh token](operations/refresh-token/revoke.md) - [Managing static access keys](operations/authentication/manage-access-keys.md) - [Managing API keys](operations/authentication/manage-api-keys.md) - [Managing authorized keys](operations/authentication/manage-authorized-keys.md) - [Creating a temporary access key using Security Token Service](operations/sa/create-sts-key.md) - [Managing ephemeral access keys](operations/authentication/manage-ephemeral-keys.md) ### Service access to user resources - [Viewing the status of services](operations/service-control/list-get.md) - [Enabling and disabling services](operations/service-control/enable-disable.md) ### Workload identity federations - [Setting up workload identity federations](operations/wlif/setup-wlif.md) ## Tutorials - [All tutorials](tutorials/index.md) - [Differentiation of access permissions for user groups](tutorials/user-group-access-control.md) ### Storing a static access key in a Yandex Lockbox secret - [Overview](tutorials/static-key-in-lockbox/index.md) - [CLI](tutorials/static-key-in-lockbox/console.md) - [Terraform](tutorials/static-key-in-lockbox/terraform.md) - [Service account with an OS Login profile for VM management via Ansible](tutorials/sa-oslogin-ansible.md) ### Integrations of workload identity federations - [GitHub](tutorials/wlif-github-integration.md) - [GitLab](tutorials/wlif-gitlab-integration.md) - [Custom installation Kubernetes](tutorials/wlif-k8s-integration.md) - [Managed Service for Kubernetes](tutorials/wlif-managed-k8s-integration.md) - [Configuring CI/CD between Cloud Functions and GitHub](tutorials/ci-cd-github-functions.md) - [Uploading objects into an Object Storage bucket with an ephemeral access key](tutorials/ephemeral-key-storage.md) ## Concepts - [Overview](concepts/index.md) ### Accounts in Yandex Cloud - [Overview](concepts/users/accounts.md) - [Service accounts](concepts/users/service-accounts.md) ### How access management works - [Overview](concepts/access-control/index.md) - [Roles](concepts/access-control/roles.md) - [Access policies](concepts/access-control/access-policies.md) - [System groups](concepts/access-control/system-group.md) - [Public groups](concepts/access-control/public-group.md) - [Resources that roles can be assigned for](concepts/access-control/resources-with-access-control.md) - [Impersonation](concepts/access-control/impersonation.md) ### Authentication - [How to choose the correct authentication method](concepts/authorization/index.md) - [IAM token](concepts/authorization/iam-token.md) - [API key](concepts/authorization/api-key.md) - [Static access key](concepts/authorization/access-key.md) - [Security Token Service](concepts/authorization/sts.md) - [Ephemeral keys](concepts/authorization/ephemeral-keys.md) - [Authorized key](concepts/authorization/key.md) - [OAuth token](concepts/authorization/oauth-token.md) - [ID token](concepts/authorization/id-token.md) - [Cookie](concepts/authorization/cookie.md) - [Refresh token](concepts/authorization/refresh-token.md) - [Service access to user resources](concepts/service-control.md) - [Identity federations](concepts/federations.md) - [Workload identity federations](concepts/workload-identity.md) - [Quotas and limits](concepts/limits.md) - [Secure use of Yandex Cloud](best-practices/using-iam-securely.md) - [Access management](security/index.md) - [Pricing policy](pricing.md) - [Role reference](roles-reference.md) ## CLI reference - [Overview](cli-ref/index.md) ### access-analyzer - [Overview](cli-ref/access-analyzer/index.md) - [list-subject-access-bindings](cli-ref/access-analyzer/list-subject-access-bindings.md) ### access-key - [Overview](cli-ref/access-key/index.md) - [create](cli-ref/access-key/create.md) - [delete](cli-ref/access-key/delete.md) - [get](cli-ref/access-key/get.md) - [issue-ephemeral](cli-ref/access-key/issue-ephemeral.md) - [list](cli-ref/access-key/list.md) ### access-policy-template - [Overview](cli-ref/access-policy-template/index.md) - [list](cli-ref/access-policy-template/list.md) ### api-key - [Overview](cli-ref/api-key/index.md) - [create](cli-ref/api-key/create.md) - [delete](cli-ref/api-key/delete.md) - [get](cli-ref/api-key/get.md) - [list](cli-ref/api-key/list.md) - [list-scopes](cli-ref/api-key/list-scopes.md) - [update](cli-ref/api-key/update.md) - [create-id-token](cli-ref/create-id-token.md) - [create-token](cli-ref/create-token.md) ### key - [Overview](cli-ref/key/index.md) - [create](cli-ref/key/create.md) - [delete](cli-ref/key/delete.md) - [get](cli-ref/key/get.md) - [list](cli-ref/key/list.md) ### oauth-client - [Overview](cli-ref/oauth-client/index.md) - [create](cli-ref/oauth-client/create.md) - [delete](cli-ref/oauth-client/delete.md) - [get](cli-ref/oauth-client/get.md) - [list](cli-ref/oauth-client/list.md) - [list-profiles](cli-ref/oauth-client/list-profiles.md) - [update](cli-ref/oauth-client/update.md) ### oauth-client-secret - [Overview](cli-ref/oauth-client-secret/index.md) - [create](cli-ref/oauth-client-secret/create.md) - [delete](cli-ref/oauth-client-secret/delete.md) - [get](cli-ref/oauth-client-secret/get.md) - [list](cli-ref/oauth-client-secret/list.md) ### refresh-token - [Overview](cli-ref/refresh-token/index.md) - [list](cli-ref/refresh-token/list.md) - [revoke](cli-ref/refresh-token/revoke.md) - [revoke-token](cli-ref/revoke-token.md) ### role - [Overview](cli-ref/role/index.md) - [get](cli-ref/role/get.md) - [list](cli-ref/role/list.md) ### service-account - [Overview](cli-ref/service-account/index.md) - [add-access-binding](cli-ref/service-account/add-access-binding.md) - [add-labels](cli-ref/service-account/add-labels.md) - [create](cli-ref/service-account/create.md) - [delete](cli-ref/service-account/delete.md) - [get](cli-ref/service-account/get.md) - [list](cli-ref/service-account/list.md) - [list-access-bindings](cli-ref/service-account/list-access-bindings.md) - [list-operations](cli-ref/service-account/list-operations.md) - [reactivate](cli-ref/service-account/reactivate.md) - [remove-access-binding](cli-ref/service-account/remove-access-binding.md) - [remove-labels](cli-ref/service-account/remove-labels.md) - [set-access-bindings](cli-ref/service-account/set-access-bindings.md) - [suspend](cli-ref/service-account/suspend.md) - [update](cli-ref/service-account/update.md) ### service-control - [Overview](cli-ref/service-control/index.md) - [disable](cli-ref/service-control/disable.md) - [enable](cli-ref/service-control/enable.md) - [get](cli-ref/service-control/get.md) - [list](cli-ref/service-control/list.md) ### user-account - [Overview](cli-ref/user-account/index.md) - [get](cli-ref/user-account/get.md) ### v0 - [Overview](cli-ref/v0/index.md) #### access-analyzer - [Overview](cli-ref/v0/access-analyzer/index.md) - [list-subject-access-bindings](cli-ref/v0/access-analyzer/list-subject-access-bindings.md) #### access-key - [Overview](cli-ref/v0/access-key/index.md) - [create](cli-ref/v0/access-key/create.md) - [delete](cli-ref/v0/access-key/delete.md) - [get](cli-ref/v0/access-key/get.md) - [issue-ephemeral](cli-ref/v0/access-key/issue-ephemeral.md) - [list](cli-ref/v0/access-key/list.md) #### access-policy-template - [Overview](cli-ref/v0/access-policy-template/index.md) - [list](cli-ref/v0/access-policy-template/list.md) #### api-key - [Overview](cli-ref/v0/api-key/index.md) - [create](cli-ref/v0/api-key/create.md) - [delete](cli-ref/v0/api-key/delete.md) - [get](cli-ref/v0/api-key/get.md) - [list](cli-ref/v0/api-key/list.md) - [list-scopes](cli-ref/v0/api-key/list-scopes.md) - [update](cli-ref/v0/api-key/update.md) - [create-id-token](cli-ref/v0/create-id-token.md) - [create-token](cli-ref/v0/create-token.md) #### key - [Overview](cli-ref/v0/key/index.md) - [create](cli-ref/v0/key/create.md) - [delete](cli-ref/v0/key/delete.md) - [get](cli-ref/v0/key/get.md) - [list](cli-ref/v0/key/list.md) #### oauth-client - [Overview](cli-ref/v0/oauth-client/index.md) - [create](cli-ref/v0/oauth-client/create.md) - [delete](cli-ref/v0/oauth-client/delete.md) - [get](cli-ref/v0/oauth-client/get.md) - [list](cli-ref/v0/oauth-client/list.md) - [list-profiles](cli-ref/v0/oauth-client/list-profiles.md) - [update](cli-ref/v0/oauth-client/update.md) #### oauth-client-secret - [Overview](cli-ref/v0/oauth-client-secret/index.md) - [create](cli-ref/v0/oauth-client-secret/create.md) - [delete](cli-ref/v0/oauth-client-secret/delete.md) - [get](cli-ref/v0/oauth-client-secret/get.md) - [list](cli-ref/v0/oauth-client-secret/list.md) #### refresh-token - [Overview](cli-ref/v0/refresh-token/index.md) - [list](cli-ref/v0/refresh-token/list.md) - [revoke](cli-ref/v0/refresh-token/revoke.md) - [revoke-token](cli-ref/v0/revoke-token.md) #### role - [Overview](cli-ref/v0/role/index.md) - [get](cli-ref/v0/role/get.md) - [list](cli-ref/v0/role/list.md) #### service-account - [Overview](cli-ref/v0/service-account/index.md) - [add-access-binding](cli-ref/v0/service-account/add-access-binding.md) - [add-labels](cli-ref/v0/service-account/add-labels.md) - [create](cli-ref/v0/service-account/create.md) - [delete](cli-ref/v0/service-account/delete.md) - [get](cli-ref/v0/service-account/get.md) - [list](cli-ref/v0/service-account/list.md) - [list-access-bindings](cli-ref/v0/service-account/list-access-bindings.md) - [list-operations](cli-ref/v0/service-account/list-operations.md) - [reactivate](cli-ref/v0/service-account/reactivate.md) - [remove-access-binding](cli-ref/v0/service-account/remove-access-binding.md) - [remove-labels](cli-ref/v0/service-account/remove-labels.md) - [set-access-bindings](cli-ref/v0/service-account/set-access-bindings.md) - [suspend](cli-ref/v0/service-account/suspend.md) - [update](cli-ref/v0/service-account/update.md) #### service-control - [Overview](cli-ref/v0/service-control/index.md) - [disable](cli-ref/v0/service-control/disable.md) - [enable](cli-ref/v0/service-control/enable.md) - [get](cli-ref/v0/service-control/get.md) - [list](cli-ref/v0/service-control/list.md) #### user-account - [Overview](cli-ref/v0/user-account/index.md) - [get](cli-ref/v0/user-account/get.md) - [whoami](cli-ref/v0/whoami.md) #### workload-identity - [Overview](cli-ref/v0/workload-identity/index.md) ##### federated-credential - [Overview](cli-ref/v0/workload-identity/federated-credential/index.md) - [create](cli-ref/v0/workload-identity/federated-credential/create.md) - [delete](cli-ref/v0/workload-identity/federated-credential/delete.md) - [get](cli-ref/v0/workload-identity/federated-credential/get.md) - [list](cli-ref/v0/workload-identity/federated-credential/list.md) ##### oidc - [Overview](cli-ref/v0/workload-identity/oidc/index.md) ###### federation - [Overview](cli-ref/v0/workload-identity/oidc/federation/index.md) - [add-access-binding](cli-ref/v0/workload-identity/oidc/federation/add-access-binding.md) - [add-audiences](cli-ref/v0/workload-identity/oidc/federation/add-audiences.md) - [add-labels](cli-ref/v0/workload-identity/oidc/federation/add-labels.md) - [create](cli-ref/v0/workload-identity/oidc/federation/create.md) - [delete](cli-ref/v0/workload-identity/oidc/federation/delete.md) - [get](cli-ref/v0/workload-identity/oidc/federation/get.md) - [list](cli-ref/v0/workload-identity/oidc/federation/list.md) - [list-access-bindings](cli-ref/v0/workload-identity/oidc/federation/list-access-bindings.md) - [remove-access-binding](cli-ref/v0/workload-identity/oidc/federation/remove-access-binding.md) - [remove-audiences](cli-ref/v0/workload-identity/oidc/federation/remove-audiences.md) - [remove-labels](cli-ref/v0/workload-identity/oidc/federation/remove-labels.md) - [set-access-bindings](cli-ref/v0/workload-identity/oidc/federation/set-access-bindings.md) - [update](cli-ref/v0/workload-identity/oidc/federation/update.md) - [whoami](cli-ref/whoami.md) ### workload-identity - [Overview](cli-ref/workload-identity/index.md) #### federated-credential - [Overview](cli-ref/workload-identity/federated-credential/index.md) - [create](cli-ref/workload-identity/federated-credential/create.md) - [delete](cli-ref/workload-identity/federated-credential/delete.md) - [get](cli-ref/workload-identity/federated-credential/get.md) - [list](cli-ref/workload-identity/federated-credential/list.md) #### oidc - [Overview](cli-ref/workload-identity/oidc/index.md) ##### federation - [Overview](cli-ref/workload-identity/oidc/federation/index.md) - [add-access-binding](cli-ref/workload-identity/oidc/federation/add-access-binding.md) - [add-audiences](cli-ref/workload-identity/oidc/federation/add-audiences.md) - [add-labels](cli-ref/workload-identity/oidc/federation/add-labels.md) - [create](cli-ref/workload-identity/oidc/federation/create.md) - [delete](cli-ref/workload-identity/oidc/federation/delete.md) - [get](cli-ref/workload-identity/oidc/federation/get.md) - [list](cli-ref/workload-identity/oidc/federation/list.md) - [list-access-bindings](cli-ref/workload-identity/oidc/federation/list-access-bindings.md) - [remove-access-binding](cli-ref/workload-identity/oidc/federation/remove-access-binding.md) - [remove-audiences](cli-ref/workload-identity/oidc/federation/remove-audiences.md) - [remove-labels](cli-ref/workload-identity/oidc/federation/remove-labels.md) - [set-access-bindings](cli-ref/workload-identity/oidc/federation/set-access-bindings.md) - [update](cli-ref/workload-identity/oidc/federation/update.md) - [Terraform reference](tf-ref.md) ## API reference - [API authentication](api-ref/authentication.md) ### gRPC - [Overview](api-ref/grpc/index.md) #### AccessAnalyzer - [Overview](api-ref/grpc/AccessAnalyzer/index.md) - [ListSubjectAccessBindings](api-ref/grpc/AccessAnalyzer/listSubjectAccessBindings.md) #### AccessPolicyTemplate - [Overview](api-ref/grpc/AccessPolicyTemplate/index.md) - [List](api-ref/grpc/AccessPolicyTemplate/list.md) #### ApiKey - [Overview](api-ref/grpc/ApiKey/index.md) - [List](api-ref/grpc/ApiKey/list.md) - [Get](api-ref/grpc/ApiKey/get.md) - [Create](api-ref/grpc/ApiKey/create.md) - [Update](api-ref/grpc/ApiKey/update.md) - [Delete](api-ref/grpc/ApiKey/delete.md) - [ListOperations](api-ref/grpc/ApiKey/listOperations.md) - [ListScopes](api-ref/grpc/ApiKey/listScopes.md) #### IamToken - [Overview](api-ref/grpc/IamToken/index.md) - [Create](api-ref/grpc/IamToken/create.md) - [CreateForServiceAccount](api-ref/grpc/IamToken/createForServiceAccount.md) - [Revoke](api-ref/grpc/IamToken/revoke.md) #### Key - [Overview](api-ref/grpc/Key/index.md) - [Get](api-ref/grpc/Key/get.md) - [List](api-ref/grpc/Key/list.md) - [Create](api-ref/grpc/Key/create.md) - [Update](api-ref/grpc/Key/update.md) - [Delete](api-ref/grpc/Key/delete.md) - [ListOperations](api-ref/grpc/Key/listOperations.md) #### OAuthClientSecret - [Overview](api-ref/grpc/OAuthClientSecret/index.md) - [Get](api-ref/grpc/OAuthClientSecret/get.md) - [List](api-ref/grpc/OAuthClientSecret/list.md) - [Create](api-ref/grpc/OAuthClientSecret/create.md) - [Delete](api-ref/grpc/OAuthClientSecret/delete.md) #### OAuthClient - [Overview](api-ref/grpc/OAuthClient/index.md) - [Get](api-ref/grpc/OAuthClient/get.md) - [List](api-ref/grpc/OAuthClient/list.md) - [ListProfiles](api-ref/grpc/OAuthClient/listProfiles.md) - [Create](api-ref/grpc/OAuthClient/create.md) - [Update](api-ref/grpc/OAuthClient/update.md) - [Delete](api-ref/grpc/OAuthClient/delete.md) #### Operation - [Overview](api-ref/grpc/Operation/index.md) - [Get](api-ref/grpc/Operation/get.md) - [Cancel](api-ref/grpc/Operation/cancel.md) #### RefreshToken - [Overview](api-ref/grpc/RefreshToken/index.md) - [List](api-ref/grpc/RefreshToken/list.md) - [Revoke](api-ref/grpc/RefreshToken/revoke.md) #### Role - [Overview](api-ref/grpc/Role/index.md) - [Get](api-ref/grpc/Role/get.md) - [List](api-ref/grpc/Role/list.md) #### ServiceAccount - [Overview](api-ref/grpc/ServiceAccount/index.md) - [Get](api-ref/grpc/ServiceAccount/get.md) - [List](api-ref/grpc/ServiceAccount/list.md) - [Create](api-ref/grpc/ServiceAccount/create.md) - [Update](api-ref/grpc/ServiceAccount/update.md) - [Delete](api-ref/grpc/ServiceAccount/delete.md) - [ListAccessBindings](api-ref/grpc/ServiceAccount/listAccessBindings.md) - [SetAccessBindings](api-ref/grpc/ServiceAccount/setAccessBindings.md) - [UpdateAccessBindings](api-ref/grpc/ServiceAccount/updateAccessBindings.md) - [ListOperations](api-ref/grpc/ServiceAccount/listOperations.md) - [Suspend](api-ref/grpc/ServiceAccount/suspend.md) - [Reactivate](api-ref/grpc/ServiceAccount/reactivate.md) #### ServiceControl - [Overview](api-ref/grpc/ServiceControl/index.md) - [Get](api-ref/grpc/ServiceControl/get.md) - [List](api-ref/grpc/ServiceControl/list.md) - [Enable](api-ref/grpc/ServiceControl/enable.md) - [Disable](api-ref/grpc/ServiceControl/disable.md) - [ResolveAgent](api-ref/grpc/ServiceControl/resolveAgent.md) #### SubjectDetails - [Overview](api-ref/grpc/SubjectDetails/index.md) - [Get](api-ref/grpc/SubjectDetails/get.md) - [List](api-ref/grpc/SubjectDetails/list.md) - [BatchGet](api-ref/grpc/SubjectDetails/batchGet.md) #### UserAccount - [Overview](api-ref/grpc/UserAccount/index.md) - [Get](api-ref/grpc/UserAccount/get.md) #### YandexPassportUserAccount - [Overview](api-ref/grpc/YandexPassportUserAccount/index.md) - [GetByLogin](api-ref/grpc/YandexPassportUserAccount/getByLogin.md) #### Access Key - [Overview](awscompatibility/api-ref/grpc/index.md) ##### AccessKey - [Overview](awscompatibility/api-ref/grpc/AccessKey/index.md) - [List](awscompatibility/api-ref/grpc/AccessKey/list.md) - [Get](awscompatibility/api-ref/grpc/AccessKey/get.md) - [Create](awscompatibility/api-ref/grpc/AccessKey/create.md) - [Update](awscompatibility/api-ref/grpc/AccessKey/update.md) - [Delete](awscompatibility/api-ref/grpc/AccessKey/delete.md) - [ListOperations](awscompatibility/api-ref/grpc/AccessKey/listOperations.md) ##### Operation - [Overview](awscompatibility/api-ref/grpc/Operation/index.md) - [Get](awscompatibility/api-ref/grpc/Operation/get.md) - [Cancel](awscompatibility/api-ref/grpc/Operation/cancel.md) ##### TemporaryAccessKey - [Overview](awscompatibility/api-ref/grpc/TemporaryAccessKey/index.md) - [CreateEphemeral](awscompatibility/api-ref/grpc/TemporaryAccessKey/createEphemeral.md) #### Workload Identity - [Overview](workload/workload-identity/api-ref/grpc/index.md) ##### FederatedCredential - [Overview](workload/workload-identity/api-ref/grpc/FederatedCredential/index.md) - [Get](workload/workload-identity/api-ref/grpc/FederatedCredential/get.md) - [List](workload/workload-identity/api-ref/grpc/FederatedCredential/list.md) - [Create](workload/workload-identity/api-ref/grpc/FederatedCredential/create.md) - [Delete](workload/workload-identity/api-ref/grpc/FederatedCredential/delete.md) ##### Operation - [Overview](workload/workload-identity/api-ref/grpc/Operation/index.md) - [Get](workload/workload-identity/api-ref/grpc/Operation/get.md) - [Cancel](workload/workload-identity/api-ref/grpc/Operation/cancel.md) ##### Federation - [Overview](workload/oidc/workload-identity/api-ref/grpc/index.md) ###### Federation - [Overview](workload/oidc/workload-identity/api-ref/grpc/Federation/index.md) - [Get](workload/oidc/workload-identity/api-ref/grpc/Federation/get.md) - [Create](workload/oidc/workload-identity/api-ref/grpc/Federation/create.md) - [Update](workload/oidc/workload-identity/api-ref/grpc/Federation/update.md) - [Delete](workload/oidc/workload-identity/api-ref/grpc/Federation/delete.md) - [List](workload/oidc/workload-identity/api-ref/grpc/Federation/list.md) - [ListAccessBindings](workload/oidc/workload-identity/api-ref/grpc/Federation/listAccessBindings.md) - [SetAccessBindings](workload/oidc/workload-identity/api-ref/grpc/Federation/setAccessBindings.md) - [UpdateAccessBindings](workload/oidc/workload-identity/api-ref/grpc/Federation/updateAccessBindings.md) ###### Operation - [Overview](workload/oidc/workload-identity/api-ref/grpc/Operation/index.md) - [Get](workload/oidc/workload-identity/api-ref/grpc/Operation/get.md) - [Cancel](workload/oidc/workload-identity/api-ref/grpc/Operation/cancel.md) ### REST - [Overview](api-ref/index.md) #### AccessAnalyzer - [Overview](api-ref/AccessAnalyzer/index.md) - [ListSubjectAccessBindings](api-ref/AccessAnalyzer/listSubjectAccessBindings.md) #### AccessPolicyTemplate - [Overview](api-ref/AccessPolicyTemplate/index.md) - [List](api-ref/AccessPolicyTemplate/list.md) #### ApiKey - [Overview](api-ref/ApiKey/index.md) - [List](api-ref/ApiKey/list.md) - [Get](api-ref/ApiKey/get.md) - [Create](api-ref/ApiKey/create.md) - [Update](api-ref/ApiKey/update.md) - [Delete](api-ref/ApiKey/delete.md) - [ListOperations](api-ref/ApiKey/listOperations.md) - [ListScopes](api-ref/ApiKey/listScopes.md) #### IamToken - [Overview](api-ref/IamToken/index.md) - [Create](api-ref/IamToken/create.md) - [CreateForServiceAccount](api-ref/IamToken/createForServiceAccount.md) - [Revoke](api-ref/IamToken/revoke.md) #### Key - [Overview](api-ref/Key/index.md) - [Get](api-ref/Key/get.md) - [List](api-ref/Key/list.md) - [Create](api-ref/Key/create.md) - [Update](api-ref/Key/update.md) - [Delete](api-ref/Key/delete.md) - [ListOperations](api-ref/Key/listOperations.md) #### OAuthClientSecret - [Overview](api-ref/OAuthClientSecret/index.md) - [Get](api-ref/OAuthClientSecret/get.md) - [List](api-ref/OAuthClientSecret/list.md) - [Create](api-ref/OAuthClientSecret/create.md) - [Delete](api-ref/OAuthClientSecret/delete.md) #### OAuthClient - [Overview](api-ref/OAuthClient/index.md) - [Get](api-ref/OAuthClient/get.md) - [List](api-ref/OAuthClient/list.md) - [Create](api-ref/OAuthClient/create.md) - [Update](api-ref/OAuthClient/update.md) - [Delete](api-ref/OAuthClient/delete.md) #### Operation - [Overview](api-ref/Operation/index.md) - [Get](api-ref/Operation/get.md) - [Cancel](api-ref/Operation/cancel.md) #### RefreshToken - [Overview](api-ref/RefreshToken/index.md) - [List](api-ref/RefreshToken/list.md) - [Revoke](api-ref/RefreshToken/revoke.md) #### Role - [Overview](api-ref/Role/index.md) - [Get](api-ref/Role/get.md) - [List](api-ref/Role/list.md) #### ServiceAccount - [Overview](api-ref/ServiceAccount/index.md) - [Get](api-ref/ServiceAccount/get.md) - [List](api-ref/ServiceAccount/list.md) - [Create](api-ref/ServiceAccount/create.md) - [Update](api-ref/ServiceAccount/update.md) - [Delete](api-ref/ServiceAccount/delete.md) - [ListAccessBindings](api-ref/ServiceAccount/listAccessBindings.md) - [SetAccessBindings](api-ref/ServiceAccount/setAccessBindings.md) - [UpdateAccessBindings](api-ref/ServiceAccount/updateAccessBindings.md) - [ListOperations](api-ref/ServiceAccount/listOperations.md) - [Suspend](api-ref/ServiceAccount/suspend.md) - [Reactivate](api-ref/ServiceAccount/reactivate.md) #### ServiceControl - [Overview](api-ref/ServiceControl/index.md) - [Get](api-ref/ServiceControl/get.md) - [List](api-ref/ServiceControl/list.md) - [Enable](api-ref/ServiceControl/enable.md) - [Disable](api-ref/ServiceControl/disable.md) - [ResolveAgent](api-ref/ServiceControl/resolveAgent.md) #### SubjectDetails - [Overview](api-ref/SubjectDetails/index.md) - [Get](api-ref/SubjectDetails/get.md) - [List](api-ref/SubjectDetails/list.md) - [BatchGet](api-ref/SubjectDetails/batchGet.md) #### UserAccount - [Overview](api-ref/UserAccount/index.md) - [Get](api-ref/UserAccount/get.md) #### YandexPassportUserAccount - [Overview](api-ref/YandexPassportUserAccount/index.md) - [GetByLogin](api-ref/YandexPassportUserAccount/getByLogin.md) #### Access Key - [Overview](awscompatibility/api-ref/index.md) ##### AccessKey - [Overview](awscompatibility/api-ref/AccessKey/index.md) - [List](awscompatibility/api-ref/AccessKey/list.md) - [Get](awscompatibility/api-ref/AccessKey/get.md) - [Create](awscompatibility/api-ref/AccessKey/create.md) - [Update](awscompatibility/api-ref/AccessKey/update.md) - [Delete](awscompatibility/api-ref/AccessKey/delete.md) - [ListOperations](awscompatibility/api-ref/AccessKey/listOperations.md) ##### Operation - [Overview](awscompatibility/api-ref/Operation/index.md) - [Get](awscompatibility/api-ref/Operation/get.md) - [Cancel](awscompatibility/api-ref/Operation/cancel.md) ##### TemporaryAccessKey - [Overview](awscompatibility/api-ref/TemporaryAccessKey/index.md) - [CreateEphemeral](awscompatibility/api-ref/TemporaryAccessKey/createEphemeral.md) #### Workload Identity - [Overview](workload/workload-identity/api-ref/index.md) ##### FederatedCredential - [Overview](workload/workload-identity/api-ref/FederatedCredential/index.md) - [Get](workload/workload-identity/api-ref/FederatedCredential/get.md) - [List](workload/workload-identity/api-ref/FederatedCredential/list.md) - [Create](workload/workload-identity/api-ref/FederatedCredential/create.md) - [Delete](workload/workload-identity/api-ref/FederatedCredential/delete.md) ##### Operation - [Overview](workload/workload-identity/api-ref/Operation/index.md) - [Get](workload/workload-identity/api-ref/Operation/get.md) - [Cancel](workload/workload-identity/api-ref/Operation/cancel.md) ##### Federation - [Overview](workload/oidc/workload-identity/api-ref/index.md) ###### Federation - [Overview](workload/oidc/workload-identity/api-ref/Federation/index.md) - [Get](workload/oidc/workload-identity/api-ref/Federation/get.md) - [Create](workload/oidc/workload-identity/api-ref/Federation/create.md) - [Update](workload/oidc/workload-identity/api-ref/Federation/update.md) - [Delete](workload/oidc/workload-identity/api-ref/Federation/delete.md) - [List](workload/oidc/workload-identity/api-ref/Federation/list.md) - [ListAccessBindings](workload/oidc/workload-identity/api-ref/Federation/listAccessBindings.md) - [SetAccessBindings](workload/oidc/workload-identity/api-ref/Federation/setAccessBindings.md) - [UpdateAccessBindings](workload/oidc/workload-identity/api-ref/Federation/updateAccessBindings.md) ###### Operation - [Overview](workload/oidc/workload-identity/api-ref/Operation/index.md) - [Get](workload/oidc/workload-identity/api-ref/Operation/get.md) - [Cancel](workload/oidc/workload-identity/api-ref/Operation/cancel.md) - [Monitoring metrics](metrics.md) - [Audit Trails events](at-ref.md) - [Release notes](release-notes.md) ## FAQ - [General questions](qa/general.md) - [Logging in and accessing resources](qa/access.md) - [All questions on one page](qa/index.md)