Hello,
Is it possible to generate an access key which provides read & write access to only one space and not all of them?
This seems like a basic security feature. :)
Thanks!
This textbox defaults to using Markdown to format your answer.
You can type !ref in this text area to quickly search our full set of tutorials, documentation & marketplace offerings and insert the link!
Accepted Answer
Hi there! 👋
Quick update: DigitalOcean has implemented the ability to have different access keys per bucket in Spaces!
This allows you to limit access to specific buckets with unique keys and secrets, giving you more control over who can access your data.
For full details, check out the official documentation here: 🔗 Manage Access Keys for Spaces
A couple of things to note:
- Legacy “All Permissions” access keys cannot be converted into per-bucket keys — you’ll need to create new ones.
- Currently, access keys can only be created in the UI (API support is on the way!).
- Buckets using PutBucketPolicy support only legacy keys for now, but integration with per-bucket keys is in the works.
DigitalOcean will be be announcing the feature to the wider community soon!
- Bobby
Heya
Great idea, sounds like it’d be super useful!
The best thing to do to get your voice heard regarding this would be to head over to our Product Ideas board and post a new idea, including as much information as possible for what you’d like to see implemented.
It’s possible to create an access key that provides read and write access to only one Space. You can achieve this by setting up Spaces access keys with a custom Spaces Policy that defines granular access.
You’ll need to create a custom policy using the DigitalOcean Control Panel or API and specify the particular Space’s access rules. Then, associate that policy with a new access key.
For detailed steps on how to create and manage Spaces access keys and policies, please refer to the official DigitalOcean documentation: Managing Access to Spaces
Hope that helps!
Become a contributor for community
Get paid to write technical tutorials and select a tech-focused charity to receive a matching donation.
DigitalOcean Documentation
Full documentation for every DigitalOcean product.
Resources for startups and SMBs
The Wave has everything you need to know about building a business, from raising funding to marketing your product.
The developer cloud
Scale up as you grow — whether you're running one virtual machine or ten thousand.
Get started for free
Sign up and get $200 in credit for your first 60 days with DigitalOcean.*
*This promotional offer applies to new accounts only.