Security, IAM, and Compliance

Showing 126

Allow to specify principals in resource policies

What problem are you trying to solve? Focus on the what and why of the need you have, not the how you'd like it solved. We manage the Atlas MongoDB foundation for our company and provide our customers projects where they are free to create th...

Luca Lombardo about 2 months ago in IAM 0 Future Consideration

19 VOTE

Support Google IdP for OIDC Workforce Federation

The Atlas supports federated login with external Identity Providers via OIDC (https://www.mongodb.com/docs/atlas/workforce-oidc/) for authenticating human users in tools like mongosh or Mongo Compass. Unfortunately the OIDC login doesn't work wit...

Guest over 1 year ago in Atlas (Control Plane and Data Plane RBAC) 4 Planned

5 VOTE

Detect automatic AWS KMS key rotation in Atlas so that the alert “AWS encryption key needs rotation” is accurate

What problem are you trying to solve? Focus on the what and why of the need you have, not the how you'd like it solved. Atlas keeps incrementing a rotation age counter (>365, >700 days) for AWS CMKs with automatic rotation enabled becau...

Marc Richard 5 months ago in Security, IAM, and Compliance 0 Future Consideration

3 VOTE

Mongo Atlas user roles separation

What problem are you trying to solve? Focus on the what and why of the need you have, not the how you'd like it solved. We encountered the problem of granular Mongo Atlas or Сompass access control to projects. The existing roles are not enoug...

khadzhynov.m@ajax.systems khadzhynov.m@ajax.systems 4 months ago in Atlas (Control Plane and Data Plane RBAC) 3 Started

1 VOTE

No DB Maintainer Role

What problem are you trying to solve? Focus on the what and why of the need you have, not the how you'd like it solved. To have a maintainer role without data read access What would you like to see happen? Describe the desired outcome ...

Prithvi Sharma about 1 month ago in Security, IAM, and Compliance 3 Started

15 VOTE

Improve Admin API for API keys rotation

Given we have security mandates where we need to rotate API keys for an organization, every 365 days. It would be ideal if when calling https://www.mongodb.com/docs/atlas/reference/api-resources-spec/v2/#tag/Programmatic-API-Keys/operation/getApiK...

Guest over 1 year ago in IAM 2 Submitted

7 VOTE

Identify users via API that are regular project users versus federated or built-in (e.g., charts) users

Expand the API to allow a way to identify and differentiate federated users and other non-manageable users (like "Charts User") from regular project users in MongoDB Atlas using API output, similar to how the Atlas UI visually marks federated user...

Guest 11 months ago in Atlas (Control Plane and Data Plane RBAC) 2 Submitted

43 VOTE

Project teams

Hello, I think it would be a good idea to have team management at project level. We have many projects and members in our Atlas account. I'm a organization owner. The people in my organization use the Altas service. I create a project for them a...

Guest almost 6 years ago in Atlas (Control Plane and Data Plane RBAC) 5 Submitted

6 VOTE

Return 'CreatedAt' for Programmatic API keys endpoints

We have an issue where we get emails from our internal Cybersecurity team 90 days after creating a MongoDB Atlas API key for rotation purposes. For other SaaS providers we're able to stay ahead of those emails by querying their APIs and getting th...

Guest 10 months ago in IAM 0 Submitted

1 VOTE

Every time, i want to see data, i need to signin. May be because of security concerns, you do this. But it will be better if i signin once and then no need to signin again

What problem are you trying to solve? Focus on the what and why of the need you have, not the how you'd like it solved. What would you like to see happen? Describe the desired outcome or enhancement. Why is this important to yo...

swayam alhat 2 months ago in IAM 0 Future Consideration

Please enter your email address

FILTER BY CATEGORY