Help Center/ Identity and Access Management_Identity and Access Management (New Edition)/ API Reference/ API/ IAM/ Managing Credentials/ Querying the Last Usage Time of a Specified Permanent Access Key
Updated on 2025-11-06 GMT+08:00
View PDF
Share

Querying the Last Usage Time of a Specified Permanent Access Key

Function

This API is used to query the last usage time of a specified permanent access key of an IAM user.

Authorization Information

Each account has all the permissions required to call all APIs, but IAM users must be assigned the following required identity policy-based permissions. For details about the required permissions, see Permissions Policies and Supported Actions.

Action

Access Level

Resource Type (*: required)

Condition Key

Alias

Dependencies

iam:credentials:showAccessKeyLastUsedV5

Read

user *

g:ResourceTag/<tag-key>

-

-

URI

GET /v5/users/{user_id}/access-keys/{access_key_id}/last-used

Table 1 Path Parameters

Parameter

Mandatory

Type

Description

user_id

Yes

String

IAM user ID.

access_key_id

Yes

String

Permanent access key ID (AK).

Minimum: 1

Maximum: 40

Request Parameters

None

Response Parameters

Status code: 200

Table 2 Response body parameters

Parameter

Type

Description

access_key_last_used

AccessKeyLastUsed object

Last usage time of the access key.
Table 3 AccessKeyLastUsed

Parameter

Type

Description

last_used_at

String

Last usage time of the access key. If no, the access key has never been used.

Status code: 403

Table 4 Response body parameters

Parameter

Type

Description

error_code

String

Error code.

error_msg

String

Error message.

request_id

String

Request ID.

encoded_authorization_message

String

Encrypted authentication failure information, which can be decrypted using the STS5 decryption API.

Status code: 404

Table 5 Response body parameters

Parameter

Type

Description

error_code

String

Error code.

error_msg

String

Error message.

request_id

String

Request ID.

Example Requests

Querying the last usage time of a specified permanent access key of an IAM user

GET https://{endpoint}/v5/users/{user_id}/access-keys/{access_key_id}/last-used

Example Responses

Status code: 200

Successful

{
  "access_key_last_used" : {
    "last_used_at" : "2023-09-13T06:51:20.550Z"
  }
}

Status Codes

Status Code

Description

200

Successful

403

Forbidden

404

Not found

Error Codes

See Error Codes.

Parent topic: Managing Credentials