Maven content served via cloudfront CDN

[jost90]

Hi guys

I tried to download dependencies using maven and noticed that atempt to download this jar:
https://packages.atlassian.com/repository/public/com/atlassian/maven/plugins/amps-maven-plugin/8.0.2/amps-maven-plugin-8.0.2.jar,

redirecting here:
https://d34y9yt11qeow3.cloudfront.net/filestore/8b/8b1562d8118813ec46fc50cf4a3ba261e61413c1?response-content-type=application%2Fjava-archive&response-content-disposition=attachment%3B%20filename%3D%22amps-maven-plugin-8.0.2.jar%22%3B%20filename%2A%3DUTF-8%27%27amps-maven-plugin-8.0.2.jar&Expires=1565683876&Signature=FRB8-PtpS3sGmyfL7tUzKpDh3NzMbiGPchxUJx4Pl-A90v-m3fe9TZmTuSX~7UXjKpxpeIuK-HHc437oXULgPbxTRynPamQE3xpGZRPvPfWpVKD7ZKb~8ahCCc3s9Z-svXm1wZ4V3IrybxDjJQAK61vVI3~7cMcCz~lSbGpogp8brWkorDGz43...

Above address looks like "dynamic" domain on cloudfront which probably changes.

Is this serious? I'm in a corporate net so i only able to download executables that are whitelisted. So in this case i have to whitelist *.cloudform.net - unfortunately it's not possible

How can i download dependeces without whitelisting whole amazon cloudfront? 
Or is there any other maven end point that does not use CDN? 

[Andy Heinzer]

Hi,

This is correct.  Many of Atlassian's sites and services could have content hosted on cloudfront domains.  This is explained in more detail in for our Cloud offerings in Atlassian Cloud IP ranges and domains, however I believe the same applies here to the dependencies of packages.atlassian.com as well.

Sorry to report that I do not have another way for you to access this resource outside this CDN address.  However if you don't want to whitelist an entire domain name, there is a list of addresses that Atlassian could be using that you can find in https://ip-ranges.atlassian.com/

This page is updated with the current address ranges that Atlassian could be using.   Perhaps this list could be helpful here as an alternative means to whitelist these addresses.

Regards,

Andy

[Javier]

This is unfortunate. Just like the original poster @jost90, I have the same problem. I'm in a corporate network whose proxy for the repository manager needs a whitelist. I can't request to whitelist each one of those IPs because it would be an endless nightmare and I don't have the time to do it. I don't even know if my request would be accepted.  

Kinda ruins my purpose because I wanted to automate the compilation process of an application via Jenkins. And I don't have a choice other than uploading the missing artifacts manaually... not very convenient for a process that is intended to be automated.

Anyways, thanks for the answer.