Can I restrict access to my Instant Website for Confluence site?

Question

I love the Instant Website for Confluence Add-On.  It provides me exactly what I want, however the rest of the management team isn't ready for public documentation.

Are you considering options in the future or have any ideas on how we could use your product but limit access.  Either through specific credentials or even a simple password?

I know its a stretch but I really want to use your product and giving access to individuals through the hosted confluence solution doesn't seem to be a great or viable option right now.

Marina Ferraz McCashin · Answer

Hi Thomas

Instant Websites is now kindly owned and supported by us here at GLiNTECH.

We have two versions of Instant Websites, cloud and server. Whilst BYO S3 Bucket is on our roadmap for the Instant Websites Cloud, it is readily available on our server version which you can try for free here: https://marketplace.atlassian.com/apps/1214121/instant-websites-for-confluence?hosting=server&tab=overview.

Otherwise, we can certainly keep you updated once the feature is available on Cloud.

marina

Thomas.Vaillant-ext · Answer

Hi @Nick Muldoon,

Is it possible to use a S3 bucket that we own, instead of yours? Because I would like to set my S3 bucket as private and create a reverse-proxy deployed in our LAN, so that we can access our Instant Website only from the LAN.

Or, have you implemented the IP addresses restrictions that you mentioned in this post?

Thank you,

Regards,

Nick Muldoon · Answer

Hi Cory,

Thanks for the question, we have had this request from a few other customers as well. Here is our current (April 2016) thinking:

1) restricting access to the site to the IP addresses for the organisation via an IP Whitelist. You / a System Administrator has the ability to add one/several IP addresses to the whitelist and people accessing from those locations can see the content. Those not on the company network/VPN would not be able to access.

2) only show the site to those people who are also logged in to the Confluence Cloud instance. In this scenario the URL of the internal site would redirect to Instant Websites, which would then confirm the user is logged in to the company Confluence instance, and then pass on the website if they are. This works whether they are on the VPN, off the VPN, etc. They just have to be logged in to Confluence.3) simple password doesn't provide much security so it is our desire to avoid this approach.Would the IP Whitelist be suitable in your scenario?Thanks Cory, have a good day.Regards,
NickNicholas MuldoonCo-Founder & Product ManagerArijea