Data Residency hook listeners additional security

[Valerie May Villuga]

Hi,

Is there a way for us to identify if a data residency hook request is valid from JIRA's migration service? We are trying to avoid anonymous requests from anyone who knows the hook APIs (through API fetch from 3rd party app like Postman).

For issue webhooks, there is this user_agent="Atlassian Webhook HTTP Client" header. Is there anything similar to this for data residency hooks or another way for us to check the request?