New security capabilities on DigitalOcean Spaces enable identity-based access control

DigitalOcean Holdings, Inc. (NYSE: DOCN), the simplest scalable cloud for growing tech companies, today announced the general availability of Per-Bucket Access Keys for DigitalOcean Spaces, its S3-compatible object storage service. This much-anticipated feature provides customers with identity-based, bucket-level control over access permissions, helping to enhance their data security and simplifying management.

Prior to the introduction of Per-Bucket Access Keys, many customers chose to limit the types of applications they ran on DigitalOcean infrastructure to those without object storage requirements or with minimal access management requirements in order to better control access to their object data. Customers also opted to limit their overall number of object workloads in order to help ensure their users did not inadvertently gain access to data unrelated to their own roles.

With Per-Bucket Access Keys, administrators can assign read-only or read-write permissions for accessing specific buckets to the appropriate users and applications within their organization. This targeted approach strengthens organizational security, helping to ensure that users and applications only have access to the data they need, and it unlocks customers’ ability to run a much wider range of applications within a single DigitalOcean account.

“Managing access to data can be tricky. Overly complex security controls can make it difficult for customers to manage their cloud environments and often require additional investments in security experts,” said Keshav Attrey, Senior Product Manager for Spaces at DigitalOcean. “With Per-Bucket Access Keys, DigitalOcean now provides developers and businesses with robust and intuitive core security controls for their users and applications while helping them maintain operational simplicity.”

Real-World Use Cases

Per-Bucket Access Keys open up a range of new possibilities for businesses and developers:

• Enhanced Security: Help ensure applications and team members only have access to the data they need.
• Multi-Tenant Environments: Better safeguard customer data by isolating access for each tenant.
• Environment Isolation: Keep development, staging, and production environments separate within the same account.
• Application-Specific Access: Help reduce the impact of a compromised access key by limiting its scope to a single bucket.
• Secure File Sharing: Share content from one bucket without exposing content from any other buckets.

"Spaces Per-Bucket Access Keys has significantly enhanced our infrastructure capabilities. By offering simple and approachable settings, it enables us to enhance security within individual buckets, providing us with a sense of security by precisely controlling access where it is most critical,” said Adam Tharani, platform developer at Marketcircle. “This enhanced control provides clarity, ultimately improving our workflows and enabling us to grant more access than previously possible."

Future Enhancements

We’re continuously working to improve the user experience and capabilities of Per-Bucket Access Keys. Here’s what’s on the horizon:

• API and CLI Support: By mid-2025, customers will be able to create Per-Bucket Access Keys through the DigitalOcean API and CLI, in addition to the DigitalOcean Control Panel.
• S3-Compatible Bucket Policy Support: Integration with S3-compatible bucket policies (PutBucketPolicy) is in progress and expected to be available by mid-2025.

To learn more or get started, visit the DigitalOcean Access Keys documentation.

About DigitalOcean

DigitalOcean is the simplest scalable cloud platform that democratizes cloud and AI for growing tech companies around the world. Our mission is to simplify cloud computing and AI to allow builders to spend more time creating software that changes the world. More than 600,000 customers trust DigitalOcean to deliver the cloud, AI, and ML infrastructure they need to build and scale their organizations. To learn more about DigitalOcean, visit www.digitalocean.com.

View source version on businesswire.com: https://www.businesswire.com/news/home/20250122749716/en/