Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request. Searching for pre-existing feature requests helps us consolidate datapoints for identical requirements into a single place, thank you!
• Please do not leave "+1" or other comments that do not add relevant new information or questions, they generate extra noise for issue followers and do not help prioritize the request.
• If you are interested in working on this issue or have submitted a pull request, please leave a comment.

• I'd be willing to implement this feature (contributing guide)

Describe the user story

Bitbucket cloud recently launched support for webhook secrets. Atlantis should allow adding a webhook secret for bitbucket cloud events. This will add improved security for atlantis to ensure recieved hooks are actually from bitbucket cloud instead of just relying on ip allow lists.

Describe the solution you'd like

The existing Atlantis support for bitbucket server webhook secrets should be extended to bitbucket cloud. This should use the existing configuration options with --bitbucket-webhook-secret. Additionally, once the feature is implemented, the warnings in the documentation regarding bitbucket cloud not supporting webhook secrets should be removed.

Describe the drawbacks of your solution

n/a

Describe alternatives you've considered

n/a