Skip to content

StatusPage API Key

Service Name: StatusPage (by Atlassian)

Service Description: StatusPage is a status communication platform that allows companies to create and maintain a status page for their services. It enables organizations to communicate real-time status updates during incidents, scheduled maintenance, and other events to their customers.

Service Address: https://www.atlassian.com/software/statuspage

Validation Type: API Auth

IP Allow list: IP restrictions can be configured at the account level through Atlassian Access

Secret Access Scope: Grants programmatic access to create, read, update, and delete StatusPage components, incidents, and metrics. Can be used to automate status updates and incident management.

Secret Revokement URL: https://developer.statuspage.io/#section/Authentication/API-Keys

Secret Example: sk_live_abcdef1234567890abcdef1234567890

Suspicious Activity Investigation Instructions:

  • Review the StatusPage activity logs for unauthorized incident creations or updates
  • Check for unexpected status changes to your services
  • Monitor for unauthorized component creations or modifications
  • Review API usage patterns for unusual activity or access from unexpected locations
  • Verify if any unexpected maintenance windows or incidents have been scheduled

Mitigation Instructions:

  • Log in to your StatusPage account
  • Navigate to the Management settings
  • Select the "API Info" tab
  • Locate the compromised API key
  • Click "Revoke" next to the key
  • Generate a new API key if needed
  • Update all legitimate applications and services with the new API key
  • Review and update your API key rotation policies
  • Consider implementing additional security measures like IP restrictions through Atlassian Access