Question

Spaces Access Keys - All are R/W?

Posted on October 22, 2018
Security Object Storage API
Asked by Stephen Boyle

Was looking into using DO Spaces but from what I can see, Access Keys generated for this service don’t seem to be able to be limited in any way? I was ideally looking to generate a r/w access key and a read-only access key for a space. Am i missing something? Thanks!

Submit an answer

This textbox defaults to using Markdown to format your answer.

You can type !ref in this text area to quickly search our full set of tutorials, documentation & marketplace offerings and insert the link!

These answers are provided by our Community. If you find them useful, show some love by clicking the heart. If you run into issues leave a comment, or add your own answer to help others.

Moisey Uretsky

DigitalOcean Employee

• December 4, 2019

Accepted Answer

Yes you can create READ only access through ACLs supported by spaces, you can find more documentation for it here:

https://developers.digitalocean.com/documentation/spaces/#acls

Bobby Iliev

Site Moderator

• December 22, 2024

Hi there! 👋

Quick update: DigitalOcean has implemented the ability to have different access keys per bucket in Spaces!

This allows you to limit access to specific buckets with unique keys and secrets, giving you more control over who can access your data.

For full details, check out the official documentation here: 🔗 Manage Access Keys for Spaces

A couple of things to note:

Legacy “All Permissions” access keys cannot be converted into per-bucket keys — you’ll need to create new ones.
Currently, access keys can only be created in the UI (API support is on the way!).
Buckets using PutBucketPolicy support only legacy keys for now, but integration with per-bucket keys is in the works.

DigitalOcean will be be announcing the feature to the wider community soon!

- Bobby