Security on Automation for Jira incoming Webhook

[Atlassian Sales]

Is there any way to set security on the incoming Webhook in Automation for Jira? Right now, it appears that an anonymous user can call the webhook. This is a significant security concern. I need to limit who can call the web hook to authenticated users, preferably restrict it to a specific project role, user group or specific user.

[Nicolas Tagle]

Hello, 

Please take a look at the following community comments https://community.atlassian.com/t5/Jira-questions/how-to-provide-Bearer-token-in-webhook-url/qaq-p/1011782

In addition, here is a Atlassian feedback ticket gathering interest about Webhook authentication  that can prove useful for your security need community https://jira.atlassian.com/browse/JRACLOUD-31953

Best regards,

Nico.