How is application tunnel access controlled?

Managing tunnels

Admins of your cloud organization can access application tunnels in admin.atlassian.com to create new tunnels (and their security keys), or view details of existing tunnels.

Admins of your Data Center instances can add or update tunnel security keys in their instances, or view details of existing tunnels.

Traffic

Application tunnels are terminated inside the Atlassian Cloud private network. Non-Atlassian products can't access them.

Outgoing communication from your network is not using the tunnels. Your self-managed instance reaches your cloud products directly.