44Security
55========
66
7+ .. contents:: On this page
8+ :local:
9+ :backlinks: none
10+ :depth: 1
11+ :class: singlecol
12+
713.. default-domain:: mongodb
814
915MongoDB provides various features, such as authentication, access
@@ -12,11 +18,13 @@ security features include:
1218
1319.. list-table::
1420 :header-rows: 1
15- :widths: 33 33 33
21+ :widths: 20 20 20 20 20
1622
1723 * - Authentication
1824 - Authorization
1925 - TLS/SSL
26+ - Enterprise Only
27+ - Encryption
2028
2129 * - :doc:`/core/authentication`
2230
@@ -36,16 +44,7 @@ security features include:
3644
3745 :doc:`/tutorial/configure-ssl-clients`
3846
39- .. the blank column is required to keep everything lined up.
40-
41- .. list-table::
42- :header-rows: 1
43- :widths: 50 50
44-
45- * - Enterprise Only
46- - Encryption
47-
48- * - :doc:`/core/kerberos`
47+ - :doc:`/core/kerberos`
4948
5049 :doc:`/core/security-ldap`
5150
@@ -69,6 +68,51 @@ Security Checklist
6968MongoDB also provides the :doc:`/administration/security-checklist` for
7069a list of recommended actions to protect a MongoDB deployment.
7170
71+ Secure Your {+atlas+} Deployments
72+ ----------------------------------------
73+
74+ {+atlas+}, the fully managed service for MongoDB deployments
75+ in the cloud, comes preconfigured with secure default settings.
76+ Atlas also provides the following key security features:
77+
78+ .. list-table::
79+ :header-rows: 1
80+ :widths: 30 70
81+
82+ * - Security Feature
83+ - Description
84+
85+ * - Authentication and Authorization
86+ - In Atlas, you configure database users to access your
87+ deployments. Atlas provides various ways to perform
88+ user authentication and authorization,
89+ including LDAP, OIDC, and X.509. To learn more, see
90+ :atlas:`Configure Authentication and Authorization
91+ </security/config-db-auth/>`.
92+
93+ * - Encryption
94+ - By default, Atlas encrypts all data stored in your
95+ deployments and uses TLS/SSL to encrypt the connections to your
96+ databases. To add another layer of security, you can configure
97+ :atlas:`Encryption at Rest using Customer Key Management
98+ </security-kms-encryption>`.
99+
100+ * - IP Access List
101+ - Atlas allows connections only from addresses specified in
102+ the IP access list. To learn how to manage client connections
103+ in Atlas, see :atlas:`Configure IP Access List Entries
104+ </security/ip-access-list/>`.
105+
106+ * - Cloud Provider Support
107+ - Atlas supports network peering connections and private endpoints
108+ to secure your deployments hosted on AWS, Azure, and Google Cloud.
109+ To learn more, see :atlas:`Set Up a Network Peering Connection
110+ </security-vpc-peering/>` and :atlas:`Configure Private Endpoints
111+ </security-configure-private-endpoints/>`.
112+
113+ For a full list of security features in Atlas, see
114+ :atlas:`Security Features for Database Deployments </setup-cluster-security/>`.
115+
72116Report Suspected Security Bugs
73117------------------------------
74118
0 commit comments