Skip to content

Digital Ocean Spaces Access Key

Service Name: DigitalOcean Spaces

Service Description: DigitalOcean Spaces is an S3-compatible object storage service that lets you store and serve large amounts of data. The service is designed to make it easy for developers to store and serve large amounts of data.

Service Address: https://www.digitalocean.com/products/spaces

Validation Type: API Auth

IP Allow list: Does not exist

Secret Access Scope: Grants programmatic access to DigitalOcean Spaces buckets and objects.

Secret Revokement URL: https://cloud.digitalocean.com/account/api/tokens

Secret Example: DO00ABCDEFGHIJKLMNOP

Suspicious Activity Investigation Instructions:

  • Check DigitalOcean Spaces access logs for unusual access patterns or unauthorized operations.
  • Review bucket permissions and access controls for any unexpected changes.
  • Look for unexpected data transfers or storage usage spikes in your DigitalOcean account.
  • Monitor for any new or modified objects in your Spaces buckets.

Mitigation Instructions:

  • Log in to your DigitalOcean account and navigate to the API section.
  • Locate and delete the compromised Spaces access key.
  • Generate a new Spaces access key with appropriate permissions.
  • Update your applications with the new key.
  • Review and restrict bucket permissions to follow the Principle of Least Privilege.
  • Enable versioning on critical buckets to protect against data loss.