Set up CMK-enabled Atlassian apps
CMK gives greater control over encryption keys to protect your Atlassian Cloud data. Currently you can create only one CMK encryption (policy) per Atlassian Cloud organization for all data in scope for new sites only. Atlassian Cloud customers not using BYOK can enroll in CMK. BYOK customers will eventually be migrated to CMK.
How to set up CMK-enabled Atlassian apps
Before you can set up CMK-enabled Atlassian apps, you need to:
Who can do this? |
When you add an Atlassian app, you have the choice of using an Atlassian managed key or a Customer managed key, giving you greater control over encryption keys.
For Atlassian Isolated Cloud customers, CMK is mandatory and built in. See Set up your AWS account and create a KMS key policy for details.
To set up a CMK-enabled Atlassian app:
Go to Atlassian Administration. Select your organization if you have more than one.
Select Apps, then Atlassian apps.
Select Add app to display the Atlassian apps available.
From the list, find the Atlassian Enterprise app you wish to add, and select Add app.
Select whether you’d like to use a new or an existing site, then enter (or select) its URL.
Select Next.
From the Encryption dropdown, select Customer managed key.
On an Atlassian Isolated Cloud instance, CMK is automatically selected and cannot be changed.Select Add.
Provisioning of your Atlassian app will now begin.
To view encrypted sites:
Go to Atlassian Administration. Select your organization if you have more than one.
Select Security, then Data protection, then Encryption.
If you’re using a CMK policy, select the Apps tab on the Encryption page to see the list of encrypted sites.
Note: If you’re using a BYOK policy, you’ll see all encrypted sites on the Encryption page itself.
Was this helpful?