This topic provides answers to some frequently asked questions about AccessKey pairs.

What does an AccessKey pair consist of?

An AccessKey pair consists of an AccessKey ID and an AccessKey secret.

  • The AccessKey ID is used to identify a user.
  • The AccessKey secret is used to verify the identity of the user. You must keep your AccessKey secret strictly confidential.

What information can I view after I create an AccessKey pair?

After you create an AccessKey pair, you can view basic information such as the AccessKey ID, the status of the AccessKey pair, the time when the AccessKey pair was last used, and the time when the AccessKey pair was created. For more information, see View the information about an AccessKey pair.

Can I view the AccessKey ID after I create an AccessKey pair?

Yes, you can view the AccessKey ID after you create an AccessKey pair.

Can I view the AccessKey secret after I create an AccessKey pair?

No, you cannot view the AccessKey secret after you create an AccessKey pair. The AccessKey secret is displayed only when you create the AccessKey pair and is unavailable for subsequent queries.

How do I check whether an AccessKey pair is in use?

You can view the time when an AccessKey pair was last used in the console or by calling an operation. This helps you check whether the AccessKey pair is in use.

  • AccessKey Pair page

    If you access the AccessKey Pair page by using an Alibaba Cloud account, you can view the time when the AccessKey pair of the Alibaba Cloud account was last used. If you access the AccessKey Pair page by using a RAM user, you can view the time when the AccessKey pair of the RAM user was last used.

  • RAM console

    If you log on to the RAM console by using an Alibaba Cloud account or a RAM user that has administrative rights, you can view the time when the AccessKey pairs of all RAM users were last used. For more information, see View the information about an AccessKey pair.

  • GetAccessKeyLastUsed

    You can call this operation to view the time when the AccessKey pair of an Alibaba Cloud account or RAM user was last used.

Can I change the AccessKey ID after I create an AccessKey pair?

No, you cannot change the AccessKey ID after you create an AccessKey pair. You can only disable, enable, or delete an AccessKey pair.

Can I restore an AccessKey pair after I delete it?

No, you cannot restore an AccessKey pair that is deleted.

Note Proceed with caution when you delete an AccessKey pair. If you delete an AccessKey pair that is in use, system failures may occur on your application.