Skip to content

imgix API Key

Service Name: imgix

Service Description: imgix is a real-time image processing and CDN service that transforms, optimizes, and delivers images to improve website and application performance.

Service Address: https://imgix.com/

Validation Type: API Auth

IP Allow list: IP restrictions can be configured at the account level through imgix's security settings.

Secret Access Scope: Grants access to imgix's API for image manipulation, purging, and management. Can be used to create, modify, and delete sources, as well as manage image transformations.

Secret Revokement URL: https://dashboard.imgix.com/api-keys

Secret Example: ak_abcdef123456789ghijklmnopqrstuvwxyz

Suspicious Activity Investigation Instructions:

  • Review imgix dashboard logs for unusual API activity or unexpected image manipulations
  • Check for unauthorized sources or domains being added to your account
  • Monitor for unusual traffic patterns or spikes in image requests
  • Verify if there are any unexpected changes to image rendering settings
  • Look for API calls from unfamiliar IP addresses or locations

Mitigation Instructions:

  • Log in to the imgix dashboard at https://dashboard.imgix.com/

  • Navigate to the API Keys section

  • Identify the compromised API key

  • Click "Revoke" or "Delete" to invalidate the key
  • Generate a new API key with appropriate permissions
  • Update the API key in all legitimate applications and services
  • Consider implementing more restrictive source settings
  • Enable additional security features like signed URLs if available
  • Review and update IP restrictions if applicable