---
id: "yandex_cloud_api_key"
kind: "datatype"
status: "draft"
is_pii: false
categories: ["secrets"]
langs: ["common"]
quality: 70
url: "https://registry.apicrafter.io/datatype/yandex_cloud_api_key"
---

# Yandex Cloud API key (`yandex_cloud_api_key`)

> **Draft.** Draft records have not been reviewed yet and may be incomplete or wrong; do not treat them as authoritative for legal or compliance decisions.

API key of a Yandex Cloud service account. Yandex does not publish the format; the masked key in the Yandex Cloud documentation and the gitleaks rule both start with AQVN, and the regexp follows gitleaks for the rest (35 to 38 letters, digits, underscores and hyphens).

- Parent datatype: `api_key`
- Personal data (PII): no
- Categories: Secrets and credentials (passwords, keys, tokens) (secrets)
- Countries: global
- Languages: Common to most languages (common)
- Classification: identifier

## Detection

Regular expression (Python `re`):

```
^AQVN[A-Za-z0-9_-]{35,38}$
```

## Examples

- `AQVN` (invalid example) — Prefix without the secret

## Supported by tools

- `datadogsds`
- `githubsecretscanning`
- `gitleaks`

## Sources

- doc: <https://yandex.cloud/en/docs/iam/concepts/authorization/api-key>
- doc: <https://yandex.cloud/en/docs/iam/operations/authentication/manage-api-keys>
- other: <https://github.com/gitleaks/gitleaks/blob/master/config/gitleaks.toml>

## Quality

Score 70/100. Missing: examples, mapping (Wikidata, Schema.org, ...), translation.

JSON: <https://registry.apicrafter.io/api/v1/datatypes/yandex_cloud_api_key.json> · Edit: <https://github.com/apicrafter/metacrafter-registry/edit/main/data/datatypes/any/secrets/yandex_cloud_api_key.yaml>