Grafana Cloud API Key
Description
General
-
Documentation: https://grafana.com/docs/grafana/latest/administration/api-keys/
-
Summary: Grafana Cloud is a fully managed observability platform that combines Grafana, Prometheus, and other tools for monitoring and visualization. Grafana Cloud API Keys are used to authenticate API requests to Grafana Cloud services, enabling programmatic access to manage resources, dashboards, and data sources. These keys are highly sensitive as they grant access to Grafana Cloud's API and associated resources.
-
IPs allowlist: As of the time of writing this documentation, IP allowlisting is not supported for Grafana Cloud API Keys.
-
Scopes: Grafana Cloud API Keys can be assigned specific roles and permissions, such as Viewer, Editor, or Admin. These roles determine the level of access to Grafana Cloud resources, including dashboards, alerts, and data sources.
Revoke the secret
API Keys can be revoked from the Grafana Cloud dashboard.
Navigate to the API Keys section under Security, locate the key, and delete it to revoke access.
Alternatively, API Keys can be revoked programmatically using the Grafana Cloud API.
Check for suspicious activity
As of the time of writing this documentation, Grafana Cloud does not provide a dedicated feature for monitoring suspicious activity specifically for API Keys. However, general activity logs can be reviewed in the Grafana Cloud dashboard.
Details for Grafana Cloud API Key
-
Family: token
-
Category: monitoring
-
Company: Grafana
-
High recall: False
-
Validity check available: True
-
Analyzer available: False
-
On-premise instances exist: False
-
Only valid secrets raise an alert: False
-
Minimum number of matches: 1
-
Occurrences found for one million commits: 1.65
-
Prefixed: False
-
PreValidators:
- type: ContentWhitelistPreValidator
patterns:
- glc_eyjvijoi
Examples
- text: glc_eyJvIjoiMjY2MTczIiwibI6Im1ldGEtbW9uaxRvcmluZy10ZXN0IiwiayI6IjAxdKeH7KTUvWuIqCfHlMKE9EhJcZH2to
apikey: glc_eyJvIjoiMjY2MTczIiwibI6Im1ldGEtbW9uaxRvcmluZy10ZXN0IiwiayI6IjAxdKeH7KTUvWuIqCfHlMKE9EhJcZH2to
# Fat-fingered secret
- text: Xglc_eyJvIjoiMjY2MTczIiwibI6Im1ldGEtbW9uaxRvcmluZy10ZXN0IiwiayI6IjAxdKeH7KTUvWuIqCfHlMKE9EhJcZH2to
apikey: glc_eyJvIjoiMjY2MTczIiwibI6Im1ldGEtbW9uaxRvcmluZy10ZXN0IiwiayI6IjAxdKeH7KTUvWuIqCfHlMKE9EhJcZH2to
