How do you setup webhooks from Bitbucket Cloud to Jenkins behind a firewall?

[Roger Myung]

I have Jenkins running in private subnet on AWS, which has no exposure to the public internet.  It is able to pull from Bitbucket Cloud, but I want to set up webhooks.

I found this blog post about using smee.io for Github: https://jenkins.io/blog/2019/01/07/webhook-firewalls/

However, it looks like there is a bug in smee when used with Bitbucket Cloud.  https://github.com/probot/smee-client/issues/116

I found 2 options:

• https://webhookrelay.com/, which is a paid service that works similarly to smee.  I'm concerned we might hit the same problems.
• Set up a public facing load balancer that redirects /bitbucket-hook/ to Jenkins.  I'm working on getting clearance to set this up.

Has anyone set up webhooks to a Jenkins that is not publicly accessible?  Are there better solutions to this problem?