In this article, you will understand step by step how to easily integrate with MongoDB Atlas
Permissions for MongoDB Atlas Integration
If you wish to grant minimum access, select option 1 Organization read-only, when assigning permissions.
-
Organization Read Only
This permission automates 5 out of 6 audit related monitors. It provides most of the automation capabilities. However, keep in mind that the "Organization Read Only" permission does not allow for the collection of organization settings, which is necessary for the remaining monitor (MFA enforcement in the organization settings) to fully automate this integration.
-
Organization Owner
To achieve complete automation, the "Organization Owner" permission is required. This level of access enables data collection at the organization level, specifically for monitoring MFA enforcement in the organization settings. If you want to cover all aspects of this integration, granting "Organization Owner" permission is essential but it's not mandatory for the integration.
Prerequisites
- Log into your MongoDB Atlas account as a Organization Owner. This role should possess the necessary permissions to create public and private keys. These keys are required to establish Scytale's connection.
How to Connect Scytale and MongoDB Atlas
1) In Scytale, go to 'Integrations'.
3) Paste the Public and Private keys.
Learn how to create these keys below.
4) Add a connection name - this will be used to differentiate between your connections - and then select 'Connect'.
5) Select projects that are pertinent to the audit to ensure that evidence is automatically gathered exclusively from these selected projects.
Note: if you don't select projects, the connection will not be completed and Scytale cannot collect evidence.
6) Select 'Confirm'.
You have now successfully connected to MongoDB Altas!
How To Create Public and Private Keys In MongoDB Altas
1) In MongoDB, click on the access manager dropdown at the top.
2) From the organization menu, select "Access Manager".
3) Ensure that "organization access" is selected in the "Access Manager" dropdown.
4) Proceed to the "API Keys" tab.
5) In the top right corner, click on "Create API key".
6) Add a description of your choosing.
7) When enabling Organization Permissions, you have two options available:
- Organization read-only: This option automates 5 out of 6 monitors.
- Organization owner: This option provides full automation capabilities, but it is not mandatory to connect the integration.
Option 1:
OR
Option 2:
8) Click on the "Next" button.
9) Copy the Public Key and Private Key
FAQs
-
How can I verify my role in MongoDB Atlas?
In your account go to Organizations