Can project access tokens be rotated by external secrets manager

[Tom Robinson]

Moving from BitBucket Data Center to BitBucket Cloud. Need to know if CyberArk can rotate project api tokens or replace SSH keys.

[Arkadiusz Wroblewski]

Hello and welcome to the Community @Tom Robinson 

From what Bitbucket Cloud documents today, project access tokens can be rotated, but that appears to be a Bitbucket UI action, not a documented public REST API operation.

I also do not see a documented public API for managing or replacing project SSH access keys in Cloud. So CyberArk could store/distribute the new secret after rotation, but I would not plan on fully API-driven external rotation/replacement for project tokens or project SSH keys in Bitbucket Cloud today.

https://developer.atlassian.com/cloud/bitbucket/rest/intro/#authentication 

https://support.atlassian.com/bitbucket-cloud/docs/rotate-an-access-token-for-a-project/