Question

Spaces Different Keys per bucket

Posted on January 15, 2018
Block Storage Object Storage
Asked by Kay van Aarssen

Hi,

Is it possible to have different keys per bucket. We would like to limit access to buckets with different access keys and secrets so that other people cannot see specific buckets?

Show comments

Submit an answer

This textbox defaults to using Markdown to format your answer.

You can type !ref in this text area to quickly search our full set of tutorials, documentation & marketplace offerings and insert the link!

These answers are provided by our Community. If you find them useful, show some love by clicking the heart. If you run into issues leave a comment, or add your own answer to help others.

Bobby Iliev

Site Moderator

• December 22, 2024

Accepted Answer

Hi there! 👋

Quick update: DigitalOcean has implemented the ability to have different access keys per bucket in Spaces!

This allows you to limit access to specific buckets with unique keys and secrets, giving you more control over who can access your data.

For full details, check out the official documentation here: 🔗 Manage Access Keys for Spaces

A couple of things to note:

Legacy “All Permissions” access keys cannot be converted into per-bucket keys — you’ll need to create new ones.
Currently, access keys can only be created in the UI (API support is on the way!).
Buckets using PutBucketPolicy support only legacy keys for now, but integration with per-bucket keys is in the works.

DigitalOcean will be be announcing the feature to the wider community soon!

- Bobby

spmfox • January 22, 2018

I just started playing with spaces today and after creating my first key and moving some data I came to the same question. Is there anything in the works to tie a specific key to a specific ‘space’ or ‘bucket’? Is there already a way to do this and I’m not finding it? Thank you.

jonny5alive • January 17, 2018

I would certainly like the same. As it stands, if one set of keys were compromised, they would gain access to every Space.