Atlassian Government Cloud support for Splunk API-based admin event collection

[Jalesa Rogers]

Hello Atlassian Community,

We are evaluating a potential future migration from Atlassian Cloud Premium to Atlassian Government Cloud and are trying to confirm whether our current Splunk/SIEM integration model would be supported in Government Cloud.

Current state:

• Splunk pulls Atlassian admin events from our Atlassian Cloud environment.

• The connection is API-key based.

• Splunk uses the Atlassian organization ID and an Atlassian-generated API key.

• Splunk pulls from Atlassian every 5 minutes.

• The data source is Atlassian admin events only.

• The integration does not use Marketplace apps, connectors, custom scripts, webhooks, or Jira automations.

• The API key is stored on the Splunk side as part of the Splunk configuration and is encrypted once provided.

• This data will be used for SIEM monitoring, reporting, dashboards, and/or alerts.

I am trying to confirm whether this same or equivalent model is supported in Atlassian Government Cloud.

Questions:

1. Are Atlassian admin events available through API access in Atlassian Government Cloud?

2. Can Splunk pull admin event data from Government Cloud using an organization ID and API key?

3. Is the same or equivalent API scope/access method available in Government Cloud?

4. Are there any Government Cloud restrictions on external SIEM tools pulling admin event data every 5 minutes?

5. Are there different endpoints, authentication methods, allowlisting requirements, or security review steps required for this type of integration?

6. Are there any FedRAMP, data boundary, or compliance limitations that would prevent or change this integration model?

7. If this exact model is not supported, what is the recommended approach for pulling or forwarding Atlassian Government Cloud admin/audit events into Splunk?

To clarify, this is not a Marketplace Splunk connector question. This is specifically about API-based admin event collection from Atlassian Government Cloud into Splunk.

Any guidance or documentation references would be appreciated.