The Atlassian Community Forums are currently in read-only mode. We will be relaunching on a new platform on September 22 (read more here). We apologize for the extended downtime. For concerns or questions, please email communitymanagers@atlassian.com. See you on the other side, on the new Atlassian Community Forums! :)

×

Forums

Articles
Create
cancel
Showing results for 
Search instead for 
Did you mean: 

Can project access tokens be rotated by external secrets manager

Tom Robinson
I'm New Here
I'm New Here
Those new to the Atlassian Community have posted less than three times. Give them a warm welcome!
March 30, 2026

Moving from BitBucket Data Center to BitBucket Cloud. Need to know if CyberArk can rotate project api tokens or replace SSH keys.

1 answer

Comments for this post are closed

Community moderators have prevented the ability to post new answers.

0 votes
Arkadiusz Wroblewski
Community Champion
March 31, 2026

Hello and welcome to the Community @Tom Robinson 

From what Bitbucket Cloud documents today, project access tokens can be rotated, but that appears to be a Bitbucket UI action, not a documented public REST API operation.

I also do not see a documented public API for managing or replacing project SSH access keys in Cloud. So CyberArk could store/distribute the new secret after rotation, but I would not plan on fully API-driven external rotation/replacement for project tokens or project SSH keys in Bitbucket Cloud today.

https://developer.atlassian.com/cloud/bitbucket/rest/intro/#authentication 

https://support.atlassian.com/bitbucket-cloud/docs/rotate-an-access-token-for-a-project/ 

TAGS
AUG Leaders

Atlassian Community Events