Skip to content

Brightcove API Key

Service Name: Brightcove

Service Description: Brightcove is a leading online video hosting platform and content management system that provides cloud-based solutions for video hosting, publishing, and analytics. It enables businesses to deliver high-quality video content across multiple devices and platforms.

Service Address: https://www.brightcove.com/

Validation Type: API Auth

IP Allow list: IP restrictions can be configured at the account level through Brightcove's security settings.

Secret Access Scope: Grants programmatic access to Brightcove's Video Cloud APIs, allowing management of video content, players, analytics, and other Brightcove services.

Secret Revokement URL: https://studio.brightcove.com/products/videocloud/admin/api-authentication

Secret Example: BCpkADawqM1W-vUOMe6RSA8MCkZv7zc4NyVBiT- QQXrnXBTMN0k25OIAXaQdLKbb8X8SrV5LVP- uxHsIKT_H0mRJe3Xu9FcmKHGbCy1_I1BNt9JEVxjxX1kXfXx9yKM

Suspicious Activity Investigation Instructions:

  • Review Brightcove account activity logs for unauthorized API calls or content access
  • Check for unexpected changes to video content, players, or account settings
  • Monitor for unusual data transfer patterns or unexpected video publishing activities

  • Review analytics for unusual viewing patterns or geographic anomalies

  • Check for unauthorized user accounts or API clients that may have been

created

Mitigation Instructions:

  • Log in to your Brightcove Video Cloud Studio account
  • Navigate to Admin > API Authentication section
  • Locate the compromised API key in the list
  • Click on the key to access its details
  • Click "Deactivate" or "Delete" to revoke the key
  • Create a new API key with appropriate permissions
  • Update all legitimate applications and services to use the new key
  • Review and update security settings for your Brightcove account
  • Enable two-factor authentication if available
  • Audit all API clients and remove any that are no longer needed