Sit back, relax, switch on Atlas for Enterprise, and let us make your business more secure. Learn how to enable security features such as LDAP in minutes. Quickly analyze your data with popular analytics tools using the BI Connector. That's right folks, we can speak SQL too!

1. MongoDB
Atlas For Your Enterprise
Ryan K. Vander Zanden, Sr. Solutions Architect, MongoDB

2. Atlas For Enterprise
NO EXCUSES

3. Atlas For Enterprise
Welcome
To
Atlas!
Active Directory
LDAPS

4. Ryan K Vander Zanden
(RVZ)
Sr. Solution Architect
MongoDB
Let’s Get To Know Each Other

5. Let’s Get To Know Each Other
CTO
January 2011 - Present
MongoDB Atlas Customer
March 2017 - Present

6. Let’s Get To Know Each Other
CTO……….
January 2011 - Present
MongoDB Atlas Customer
March 2017 - Present

7. Let’s Get To Know Each Other
CTO……….
Architect, DBA, Sys Admin, Developer, QA, Project Manager
January 2011 - Present
MongoDB Atlas Customer
March 2017 - Present

8. Let’s Get To Know Each Other
CTO……….
Architect, DBA, Sys Admin, Developer, QA, Project Manager
+ everything else that involves a computer
January 2011 - Present
MongoDB Atlas Customer
March 2017 - Present

9. Let’s Get To Know Each Other
Raise your hand if...
you know what MongoDB is

10. Let’s Get To Know Each Other
Raise your hand if...
you have used MongoDB

11. Let’s Get To Know Each Other
Raise your hand if...
you know what MongoDB Atlas is

12. Let’s Get To Know Each Other
Raise your hand if...
you have used MongoDB Atlas

13. What is Atlas?
1 2
and...

14. What is Atlas? Secure
Scalable
Available
Free-tierable
Pay For What You Use
Elastic
Database Service
Automated Operations
Performance Visibility
Continuous Backups
3

15. Why Move To Atlas?
Cloud Perks!
Confirmed Safe
By Regulators!
Cloud Computing

16. Why Move To Atlas?
IT

17. Why Move To Atlas?
IS

18. Why Move To Atlas?
SO

19. Why Move To Atlas?
EASY!

20. Excuses, Excuses...
! X NO
...and we’re just getting started!
Introducing Atlas For Enterprise
Active Directory
LDAPS

21. BYO Active Directory via LDAPS

22. BYO Active Directory via LDAPS
Lightweight Directory Access Protocol
(Secure)

23. BYO Active Directory via LDAPS
W
h
y
?
Single Sign-On (SSO)
Security Administration
Password Controls

24. BYO Active Directory via LDAPS
Configure
Configure
Configure
Configure
Configure
Configure

25. BYO Active Directory via LDAPS

26. BYO Active Directory via LDAPS
Centralize database access management and eliminate
the need to recreate permissions by using your LDAP
server (over TLS/SSL) to manage user authentication
and authorization.
● LDAP groups are mapped to different MongoDB
roles in your MongoDB Atlas databases
● LDAP configuration applies to all dedicated
database clusters within an Atlas Project
● Available for deployments running MongoDB 3.4+

27. Database Auditing

28. Database Auditing
W
h
y
?
Data=
S**t
Happens!

29. Database Auditing
createDatabase
createCollection
createIndex
renameCollection
dropCollection
dropDatabase
authCheck
dropIndex
createUser
authenticate
dropUser
dropAllUsersFromDatabase
updateUser
grantRolesToUser
revokeRolesFromUser
createRole
updateRole
dropRole
dropAllRolesFromDatabase
grantPrivilegesToRole
addShard
enableSharding
shardCollection
removeShard
revokePrivilegesFromRole
applicationMessage
shutdown
W
h
a
t
?

30. Database Auditing
Answer detailed questions about system activity by tracking DDL, DML, and DCL commands.
● Easily select the actions you want audited as well as the MongoDB users, Atlas roles, or
LDAP groups you want to audit from the Atlas UI
● Alternatively, create an audit filter as a JSON string
● Auditing configuration applies to all dedicated clusters within an Atlas project
● Audit logs can be downloaded in the UI or retrieved using the MongoDB Atlas API

31. Database Auditing

32. Database Auditing

33. Database Auditing

34. Database Auditing

35. Database Auditing

36. Encryption At Rest
@

37. Encryption At Rest
You control the
coming soon!
W
h
y
?

38. Encryption At Rest

39. Encryption At Rest

40. Encryption At Rest

41. Encryption At Rest

42. Encryption At Rest
Rotation
Deletion

43. Encryption At Rest
MongoDB Atlas integrates with your key management
service of choice (starting with AWS KMS), allowing you
to centralize control of the keys used to encrypt your
MongoDB data
● BYO KMS leverages MongoDB’s encrypted
storage engine (AES256-CBC via OpenSSL) for
database-level encryption
● Create, import, and rotate keys for MongoDB Atlas
as well as define usage policies and audit usage
with the same console/CLI used to manage keys
for your other cloud services

44. Encryption At Rest

45. Encryption At Rest

46. BI Connector

47. BI Connector
No hablo MQL!
No hay problema.
Entiendo SQL!

48. BI Connector

49. BI Connector

50. BI Connector

51. BI Connector

52. Coming Attractions
Custom Roles
Temporary Users
Temporary Whitelist Support
x509 Authentication
Azure KeyVault
Google KMS
Advanced BI Connector Configuration

54. Q&A