Licensing and hosting in our own cloud

Question

Hi Atlassian,

We are a server licensed customer of several of your products for our internal development operations.

We are planning to move our internal development infrastructure into the cloud. As part of that we are investigating hosting of JIRA, BitBucket and Confluence in Amazon AWS. Do you have any issues with us hosting a licensed JIRA/BitBucket/Confluence server in a cloud?

Also, as a matter of policy, to protect our data, we are planning to run a vulnerability test on all tools deployed in our cloud environment. Are there any issues with running a vulnerability test within our environment against our servers running a licensed version of your software?

Basil

Nic Brough -Adaptavist- · Answer

I'm guessing you are reading https://www.atlassian.com/legal/acceptable-use-policy ?

You're absolutely right that running your security scans against their software on their serves breaches the AUP.

But... that applies to their servers, not yours.  You can do what you want with your servers, even if they're running Atlassian software.  In fact, Atlassian would support you doing it - if security testing is something you want to do against your servers, you absolutely should do it.  I am aware of a number of sites hosting Atlassian software who run some pretty heavy and hardcore security checks on their own stuff regularly and very frequently (and I'm not going to pretend Atlassian always passes every test).

Gaston Valente_dzz4x1 · Answer

Basil,

There's no problem, atlassian promotes the reporting of security issues with a number of programs.

you can check https://www.atlassian.com/trust/security

Basil Baluta · Answer

Thanks Nic,

I believe we have the OS container worked out, but I a concerned if somehow we would be violating Atlassians Acceptable Use terms in the legal agreements by running a vulnerability scan against their software, licensed appropriately, in our servers on a cloud.