FAQ: Atlassian Isolated Cloud

This page answers common questions about Atlassian Isolated Cloud’s architecture, operation, and administration.

Architecture

Question

Answer

Who hosts and manages Atlassian Isolated Cloud?

Atlassian Isolated Cloud is managed by Atlassian and hosted in a dedicated AWS Virtual Private Cloud.

Is Atlassian Isolated Cloud the same as a virtual private cloud (VPC) offering?

Essentially, yes. When you buy Atlassian Isolated Cloud, you get an Atlassian-managed, dedicated virtual private cloud environment.

A virtual private cloud (VPC) is a secure, isolated private cloud hosted within a public cloud network. VPC customers can run code, store data, host websites, and do anything else they could do in an ordinary private cloud but the private cloud is hosted remotely by a public cloud provider. Within each VPC, dedicated instances (virtual servers) run applications and store data, ensuring isolation from other customers.

An Atlassian Isolated Cloud customer gets their own secure, isolated VPC to run Atlassian product instances and store data. Atlassian apps are deployed in these instances, providing dedicated compute, storage and network resources.

Are some services in Atlassian Isolated Cloud shared? With whom are they shared and why?

While key customer data is stored in isolation from other customers, some services in Atlassian Isolated Cloud are shared. Learn more about Access and shared services in Atlassian Isolated Cloud.

Do Atlassian Isolated Cloud accounts need to be single-tenant?

Atlassian Isolated Cloud offers isolation for a single customer’s user-generated content. You may want to have multiple cloud organizations isolated within the virtual private cloud. We can support both multi-tenant and single-tenant Atlassian Isolated Cloud environments.

Does Atlassian Isolated Cloud allow for restricted IP ranges?

Yes, through Atlassian Guard IP allowlisting on the Atlassian cloud apps themselves. That lets you restrict user access to those products to specific IP ranges or countries, via Admin Hub security policies. For more information, learn how to Specify IP addresses for app access.

Does Atlassian Isolated Cloud support point-to-point or site-to-site VPNs directly from AWS?

Not at this time, although we're interested in hearing more about your needs in this area.

Experience

Question

Answer

How does administration work in Atlassian Isolated Cloud?

  • In general?

  • For customers who use Atlassian Isolated Cloud and Atlassian Cloud?

Administration should work the same in Atlassian Isolated Cloud as it does in Atlassian Cloud, although some features may be unavailable at this time. See Apps and features available for Atlassian Isolated Cloud for a full list of supported and upcoming administration features.

If you use both Isolated Cloud and Atlassian Cloud, you’ll be setting up a new organization for Isolated Cloud, and will need to manage multiple organizations. For example, if you use Authentication policies in Atlassian Cloud, you will have to set these up again in Isolated Cloud.

How do I log into my Isolated Cloud instance?

To log into your Isolated Cloud instance:

  1. Go to .

  2. Enter your email.

  3. Select the Isolated Cloud option from the Environment dropdown.

  4. Select Continue.

Can I configure Automation rules to integrate with third-party systems?

All traffic to third-party systems from automation rules is blocked by default, preventing high-risk data from leaving the isolation boundary.

To enable specific third-party systems, contact support.

Compliance

Question

Answer

What compliance frameworks does Isolated Cloud support?

Atlassian Isolated Cloud uses the same security and privacy controls as the Enterprise versions of our Atlassian Commercial Cloud offering. You're welcome to review our cloud compliance information to better understand the controls that are available in Atlassian Isolated Cloud.

The key feature that we’re providing is isolation for the customer’s control plane. This means that most user-generated content (data related to day-to-day work) is stored, served, and accessed via infrastructure and services dedicated to that customer. This gives you more control over your data and how it’s accessed, with less risk of accidental data incidents. Atlassian Isolated Cloud also provides protection with advanced security features like BYOK, Atlassian Guard Premium, and strict network controls over data ingress and egress.

Does Atlassian Isolated Cloud support data sovereignty?

In short, Atlassian Isolated Cloud doesn’t support data sovereignty.

Data sovereignty is the concept that data is used and kept per the laws and regulations of the country or jurisdiction in which it is situated. This can have implications for how data must be handled beyond where it's physically stored.

Atlassian Isolated Cloud enables storing user-generated content in an isolated environment within supported data residency regions for Isolated Cloud but this doesn’t meet the definition of Data Sovereignty in many countries.

Does Atlassian Isolated Cloud fall under Atlassian Guidelines for Law Enforcement Requests or are there any differences or exceptions?

Yes, Isolated Cloud is an Atlassian-managed environment that follows the same guidelines for law enforcement as our commercial cloud services.

Security and control

Question

Answer

What do I have more control over in Atlassian Isolated Cloud?

In Isolated Cloud, you have more control over the movement and security of your data:

  • By default, most UGC or personal data won’t egress the Isolated Cloud. Such data can only be accessed by Atlassian staff and systems under strict egress rules; learn more about Access and shared services in Atlassian Isolated Cloud.

  • Customer-managed encryption keys available by default.

  • Backup and restore are available by default.

Is it possible to share data between an Atlassian Isolated Cloud environment and an Atlassian Cloud environment or Data Center environment?

Isolated Cloud has separate organizations from any Atlassian Cloud or Data Center environments. Application links (OAuth 1.0 and OAuth 2.0) are available in Atlassian Isolated Cloud which allow for connections to be made “Cloud to Cloud” or “Cloud to Data Center”.

What data residency regions are supported in Atlassian Isolated Cloud?

Atlassian can provision an Isolated Cloud instance on any supported AWS region. However, once an instance is provisioned, it can’t be migrated to another location. Learn more about Data residency for Isolated Cloud

Performance and scale

Question

Answer

What uptime SLAs does Atlassian Isolated Cloud offer?

Atlassian Isolated Cloud offers the same SLAs as Atlassian Cloud’s Enterprise version.

Does the Atlassian Isolated Cloud architecture allow the creation of more than 150 cloud sites for a single organization?

No, this limit remains consistent.

Does Atlassian Isolated Cloud provide any performance benefits over Atlassian Cloud?

All Atlassian Cloud deployment options benefit from scaling efficiencies in cloud. Cloud services automatically adjust the number of active resources, such as servers or instances, based on the current demand. This ensures that applications have the necessary resources to handle varying loads efficiently without manual intervention.

However, in a multi-tenant environment with shared resources, there is some risk of performance impacts caused directly by constraints on shared resources.

In principle, isolation helps limit the risks of certain types of performance impacts related to shared resources. For example, if there is a surge in usage among customers in a multi-tenant environment, this could impact performance for an individual customer sharing compute resources. This isn’t the case when resources aren’t shared.

However, if you experience performance and scale issues in Atlassian Cloud that are consistent and predictable (slow search, slow loading times, experience impacts at scale), isolation won’t provide any changes to resolve these issues.

User provisioning

Question

Answer

How does user provisioning work in the Atlassian Isolated Cloud?

The Atlassian Isolated Cloud supports the same identity providers as the Atlassian Commercial Cloud, and follows a similar provisioning workflow for its user database as well. However, each Atlassian Isolated Cloud instance maintains a separate user database from the Atlassian Commercial Cloud.

Understand user provisioning describes how user provisioning works in general, while User provisioning in the Atlassian Isolated Cloud describes exceptions for the Atlassian Isolated Cloud.

 

Still need help?

The Atlassian Community is here for you.