Report this

What is the reason for this report?

How to define access control in Spaces

Posted on May 24, 2019

I can’t find a way to get finer control on which Spaces access keys has access to which Space/bucket or even better down to which folders in buckets.

Is there a way to achieve this?



This textbox defaults to using Markdown to format your answer.

You can type !ref in this text area to quickly search our full set of tutorials, documentation & marketplace offerings and insert the link!

These answers are provided by our Community. If you find them useful, show some love by clicking the heart. If you run into issues leave a comment, or add your own answer to help others.
0

Accepted Answer

Hi there! 👋

Quick update: DigitalOcean has implemented the ability to have different access keys per bucket in Spaces!

This allows you to limit access to specific buckets with unique keys and secrets, giving you more control over who can access your data.

For full details, check out the official documentation here: 🔗 Manage Access Keys for Spaces

A couple of things to note:

  • Legacy “All Permissions” access keys cannot be converted into per-bucket keys — you’ll need to create new ones.
  • Currently, access keys can only be created in the UI (API support is on the way!).
  • Buckets using PutBucketPolicy support only legacy keys for now, but integration with per-bucket keys is in the works.

DigitalOcean will be be announcing the feature to the wider community soon!

- Bobby

Hey there, thanks for reaching out to DO!

My name is Ethan from the Developer Support team, I specialize in storage-related inquires.

At this time there are limitations to our Spaces Access Keys. There is a community IDEA you can show your support on asking for more robust access keys. This is something our product team is evaluating so additional feedback there won’t hurt!

With regards to a workaround in the meantime using Team Accounts with separate Access Keys + Spaces will help divide up your Spaces/Access Keys into usable groups.

If you have any other questions or need clarification on anything, just write back and let me know! :)

Regards, Ethan | Developer Support Engineer II @ DigitalOcean Storage Team

Three years later and this is still not possible?

The developer cloud

Scale up as you grow — whether you're running one virtual machine or ten thousand.

Get started for free

Sign up and get $200 in credit for your first 60 days with DigitalOcean.*

*This promotional offer applies to new accounts only.