Preparing your firewall to migrate using the Bitbucket Cloud Migration Assistant
Platform Notice: Data Center Only - This article only applies to Atlassian products on the Data Center platform.
Note that this KB was created for the Data Center version of the product. Data Center KBs for non-Data-Center-specific features may also work for Server versions of the product, however they have not been tested. Support for Server* products ended on February 15th 2024. If you are running a Server product, you can visit the Atlassian Server end of support announcement to review your migration options.
*Except Fisheye and Crucible
Summary
In order to use the Bitbucket Cloud Migration Assistant (BCMA) to migrate, it needs to connect to a variety of Atlassian domains in order to run. If any domains are blocked by either a firewall or a reverse proxy, the migration will fail. The document will outline the domains and IP address ranges that need to be allowed to ensure that Atlassian cloud products and other services work as expected.
Solution
FYI: The BCMA allowlist is the same as the JCMA allowlist, except for the media API which is not needed.
Ensure that all of the domains listed in Atlassian cloud IP ranges and domains will not be blocked by any security rules before running a migration.
Additionally, allow the following endpoints used by the Bitbucket Cloud Migration Assistant:
https://api-private.atlassian.com/- Enables communication with the Atlassian Migration Platform.https://marketplace.atlassian.com/- Enables us to check that the migration assistant is up to date.https://api.atlassian.com/- Enables communication with the Atlassian App Migration Platform.https://migration.atlassian.com/- Enables communication with Atlassian Migration Platform.https://*.s3.us-west-2.amazonaws.com- Enables uploading of migration data.If wildcard is not allowed, please make sure to add the following URLs:
https://rps--prod-west2--migration-catalogue--migration-storage.s3.us-west-2.amazonaws.com/https://rps--prod-west2--migration-catalogue--migration-storage-v2.s3.us-west-2.amazonaws.com/https://rps--prod-west2--migration-orchestrator--task-data-repository.s3.us-west-2.amazonaws.com/
https://rps--prod-east--app-migration-service--ams.s3.amazonaws.com-Enables uploading of app migration databitbucket.org- Enables communication with your destination cloud workspace.
NOTE: If you’re a Premium Bitbucket Cloud customer and have set a custom IP allowlist, please make sure that the IP of your Bitbucket Server is also included. More info: https://support.atlassian.com/bitbucket-cloud/docs/control-access-to-your-private-content/
Was this helpful?