DigitalOcean Spaces

DigitalOcean Spaces connector using the S3-compatible object API.

Property	Value
Key	digitalocean_spaces
Source type	object_storage
Status	native
Active by default	no
Default cache strategy	semantic_first
Capabilities	supports_discovery, supports_incremental_sync, supports_ingestion, supports_write

Connection configuration

Secret fields should be given as a reference, <field>_ref, such as env://NAME, rather than a literal.

Key	Secret
bucket	no
prefix	no
region_name	no
endpoint_url	no
aws_access_key_id_ref	no
aws_secret_access_key_ref	no
aws_access_key_id	yes; prefer aws_access_key_id_ref
aws_secret_access_key	yes; prefer aws_secret_access_key_ref

Default role templates

Offered when a source is created with default roles. Edit them to fit.

blocked

Effect	Action	Resource type	Pattern
deny	*	*	*

browser

Effect	Action	Resource type	Pattern
allow	storage.bucket.list	storage.bucket	*
allow	storage.prefix.list	storage.prefix	*

maintainer

Effect	Action	Resource type	Pattern
allow	storage.bucket.list	storage.bucket	*
allow	storage.prefix.list	storage.prefix	*
allow	storage.object.read	storage.object	*
allow	storage.object.metadata.read	storage.object	*
allow	discovery.search	discovery.asset	*
allow	discovery.asset.read	discovery.asset	*
allow	storage.object.delete	storage.object	*

reader

Effect	Action	Resource type	Pattern
allow	storage.bucket.list	storage.bucket	*
allow	storage.prefix.list	storage.prefix	*
allow	storage.object.read	storage.object	*
allow	storage.object.metadata.read	storage.object	*
allow	discovery.search	discovery.asset	*
allow	discovery.asset.read	discovery.asset	*

writer

Effect	Action	Resource type	Pattern
allow	storage.bucket.list	storage.bucket	*
allow	storage.prefix.list	storage.prefix	*
allow	storage.object.read	storage.object	*
allow	storage.object.metadata.read	storage.object	*
allow	discovery.search	discovery.asset	*
allow	discovery.asset.read	discovery.asset	*
allow	storage.object.write	storage.object	*