Block/monitor commits from personal devices

[Rishi Tandon]

We're using Bitbucket Cloud. We're facing an issue where users are able to create SSH keys and utilise them from personal devices to push commits directly to the bitbucket repo. 

Authentication to bitbucket cloud is integrated through Okta and is not allowed on personal devices.

We're trying to find a way where we could block or monitor this activity ? I can't see any commit messages logged in audit logs to identify where the commits are originating from. 

Does anyone have any idea on how we could achieve this ?

[Ben]

Hi Rishi,

Users can only authenticate to the workspace if they are verifying using an SSH key/user account that is specifically tied to the workspace.

If you need to block users from connecting via their personal devices - I'd suggest configuring an IP allowlist to block any non-company network IP addresses:

• https://support.atlassian.com/bitbucket-cloud/docs/control-access-to-your-private-content/

Cheers!

- Ben (Bitbucket Cloud Support)