Skip to content

Digital Ocean Spaces Keys

Service Name: DigitalOcean Spaces

Service Description: DigitalOcean Spaces is an S3-compatible object storage service that lets you store and serve large amounts of data. The service is designed to make it easy to scale storage needs and provides a simple way to store and retrieve any amount of data from anywhere on the web.

Service Address: https://www.digitalocean.com/products/spaces

Validation Type: API Auth

IP Allow list: IP restrictions can be configured through DigitalOcean's Cloud Firewall for the Spaces service.

Secret Access Scope: Grants programmatic access to manage objects within DigitalOcean Spaces buckets, including uploading, downloading, and deleting files.

Secret Revokement URL: https://cloud.digitalocean.com/account/api/tokens

Secret Example: DO00XXXXXXXXXXXXXXXXXXXX:XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

Suspicious Activity Investigation Instructions:

  • Review access logs for unusual file operations or access patterns
  • Check for unexpected data transfers or bandwidth usage spikes
  • Monitor for unauthorized bucket creation or modification
  • Look for changes in bucket permissions or public access settings
  • Verify if there are any unexpected CDN configurations

Mitigation Instructions:

  • Log in to your DigitalOcean account and navigate to the API section

  • Locate the compromised Spaces access key in the Spaces Access Keys section

  • Click on the "More" dropdown menu next to the key and select "Reset Secret"

  • Alternatively, click "Delete" to completely remove the compromised key
  • Generate a new Spaces key if needed
  • Update any applications or services using the old key with the new credentials
  • Review and adjust bucket permissions to ensure proper access controls
  • Enable bucket access logging to monitor future activity