Keeping your code secure in the cloud

This post details Atlassian's platform-level cloud security practices for Bitbucket Cloud, including AWS hosting, data encryption (TLS 1.2+, AES-256), daily backups with quarterly testing, endpoint protection, and role-based access control for staff. It also outlines user-manageable security settings within Bitbucket Cloud such as IP allowlisting, enforced 2FA, disabling public content and forking outside the workspace, support for self-hosted runners, audit logs, and enforced signed commits (GPG/SSH). Additionally, it highlights CI/CD integrations for security, including secret scanning, infrastructure-as-code scanning, dependency scanning, workspace-level merge checks, and dynamic pipelines for orchestrating security steps.