Question

Access Key for Specific Space

Posted on October 12, 2020
Object Storage DigitalOcean
Asked by DigitalJonathan

Hello,

Is it possible to generate an access key which provides read & write access to only one space and not all of them?

This seems like a basic security feature. :)

Thanks!

Submit an answer

This textbox defaults to using Markdown to format your answer.

You can type !ref in this text area to quickly search our full set of tutorials, documentation & marketplace offerings and insert the link!

These answers are provided by our Community. If you find them useful, show some love by clicking the heart. If you run into issues leave a comment, or add your own answer to help others.

Bobby Iliev

Site Moderator

• December 22, 2024

Accepted Answer

Hi there! 👋

Quick update: DigitalOcean has implemented the ability to have different access keys per bucket in Spaces!

This allows you to limit access to specific buckets with unique keys and secrets, giving you more control over who can access your data.

For full details, check out the official documentation here: 🔗 Manage Access Keys for Spaces

A couple of things to note:

Legacy “All Permissions” access keys cannot be converted into per-bucket keys — you’ll need to create new ones.
Currently, access keys can only be created in the UI (API support is on the way!).
Buckets using PutBucketPolicy support only legacy keys for now, but integration with per-bucket keys is in the works.

DigitalOcean will be be announcing the feature to the wider community soon!

- Bobby

alexdo

Site Moderator

• June 4, 2023

Heya

Great idea, sounds like it’d be super useful!

The best thing to do to get your voice heard regarding this would be to head over to our Product Ideas board and post a new idea, including as much information as possible for what you’d like to see implemented.

https://ideas.digitalocean.com/

It’s possible to create an access key that provides read and write access to only one Space. You can achieve this by setting up Spaces access keys with a custom Spaces Policy that defines granular access.

You’ll need to create a custom policy using the DigitalOcean Control Panel or API and specify the particular Space’s access rules. Then, associate that policy with a new access key.

For detailed steps on how to create and manage Spaces access keys and policies, please refer to the official DigitalOcean documentation: Managing Access to Spaces

Hope that helps!