Inquiry About Bitbucket Security Features and Cloud Hosting

[Siddhesh Nagaonkar]

 I would appreciate your assistance in understanding the security features offered by Bitbucket from an information security perspective. Currently, I am using same for code repository management, but it does not provide sufficient security for my application code. I would like to know if it can be securely hosted on a cloud environment like AWS, ensuring proper access controls and data protection. Could you please provide clarity on Bitbucket security features and how they align with best practices for securing application code in the cloud?

[Theodora Boudale]

Hi Siddhesh and welcome to the community!

Access to Bitbucket Cloud repositories can be granted on the repository level and also on the project level (it will then apply to all repos belonging to that project). You can read more about both here:

• https://support.atlassian.com/bitbucket-cloud/docs/grant-repository-access-to-users-and-groups/
• https://support.atlassian.com/bitbucket-cloud/docs/configure-project-permissions-for-users-and-groups/

Repositories are encrypted at rest (AES-256) and encrypted in transit (TLS 1.2+).

You can check additional security features on this page:

• https://www.atlassian.com/software/bitbucket/pricing#:~:text=Security%20%26%20Compliance

For example, the Premium billing plan allows you to enable IP allowlisting for a workspace (the workspace can be accessed only from specific IPs that you allowlist).

If you select a certain feature from this last page I shared, you can read a description and you will see a link to Learn More.

You can also read more about our approach to security on the following page:

• https://www.atlassian.com/trust/security/security-practices#our-approach

Kind regards,
Theodora