What are the security risks in creating a tunnel from Jira Cloud to Bitbucket Data Center?

unknown

 

What are the security risks in creating a tunnel from Jira Cloud to Bitbucket Data Center?
From Atlassian support:

Link Bitbucket with Jira Software Cloud

If your Bitbucket instance is behind a firewall, we recommend that you use an application tunnel to link Bitbucket with Jira Software Cloud. Application tunnels are available for Bitbucket 6.9 and later.  Learn more about application tunnels

What happens if the Jira Cloud account gets hacked?
Thank you,

Jim Knepley - ReleaseTEAM

The application tunnels you linked to are implemented using secure WebSocket protocols. This means there is an encrypted connection between Jira Cloud and Bitbucket, but that connection cannot be used directly to access other systems within your network. If Bitbucket has behaviors that allows lateral movement, that's another story.

"What happens if the Jira Cloud account gets hacked?"

The compromised account could be used to perform authorized operations, which could range from viewing dashboards or issues to administering the Atlassian Cloud account, depending on the permissions of the compromised account. A compromised account would be a very bad thing for a variety of reasons, application link or otherwise. I don't think it poses a serious risk to your internal network.

If someone manages to get access to the underlying host operating system, a WebSocket wouldn't benefit them significantly since it's in the "application layer" at both ends.