In every org there comes a time
To build anew and free your mind
With Atlas you can launch for free
A new instance of MongoDB
Build out fast and watch it grow
To the head of the Enterprise class you'll go
With LDAP, Auditing, Data Warehousing, and more
Autoscale your way to the C-suite floor
MongoDB World 2019: Plant a Seed, Grow a Tree, Atlas For Enterprise MongoDB
1. Ralph Capasso – Lead Engineer, Atlas Enterprise
Plant a Seed, Grow a Tree, Atlas For Enterprise MongoDB
@ralphcapasso
2. Plant a Seed, Grow a Tree,
Atlas For Enterprise MongoDB
Written and Illustrated By: Ralph Capasso
3. Plant a Seed, Grow a Tree,
Atlas For Enterprise MongoDB
Written and Illustrated By: Ralph Capasso
4. Welcome to MongoDB World two thousand one nine
Sit back, relax, and open your mind
Close your eyes, take a breath, we’re about to dive in
Without further adieu, please allow me to begin
5. My name is Ralph Capasso and I am the Lead Engineer
Of the Atlas Enterprise team and I am excited to be here
My journey begins back over eighteen years
When I got my start with a music industry career
6. I built large scale systems to manage and distribute the songs
To which many of you likely still sing along
Over those years many things I did learn
About how an Enterprise business can take a twist and a turn
7. And that experience is what led me here to MongoDB
To make Atlas the best hosted database across the land and sea
So plant a seed, grow a tree, take this journey with me
Bring your ideas to life; let us handle the DB
8. It is an ordinary Spring day in the middle of May
You sit at your desk and you’re plugging away
When all of a sudden you’re hit with an idea
Like a bolt of lightening right in your rear
9. You can barely contain yourself, you see a wave of lights
You can make this old company reach great new heights
You envision an app built for the big execs
To track all of the company’s sales and make brilliant recs
10. It will be amazing and great, this idea cannot wait
Then you remember how hard it can be to innovate
You need a tech stack that is fast and is slick
To be successful you really have to be quick
11. And on top of it all, you have a job to do
That just cannot get done without involvement from you
In a big organization, it can be difficult to find
A way to give new things a good honest try
12. So you start to dig in late one night
To find the perfect database to bring this idea to life
Because let’s face it the one thing that can’t wait ‘til later
Is the system you use to manage all that sales data
13. Your mind wanders to Mongo like an old ghost
You remember loving this database your company couldn’t host
Then you hear your manager’s voice shouting out loud
These days we want to run everything in the cloud
14. So you continue on searching until what can this be
You stumble upon Atlas by MongoDB
You jump up and down, perhaps you can give it a chance
You’re so excited you start to do a light techno dance
15. Then just when you think you found something cool
You remember your org has some pretty strict rules
It’s not easy to try new things not tomorrow, not today
If the company doesn’t have an agreement in the form of an MSA
16. But then out from the darkness you suddenly see
Atlas let’s you launch MongoDB absolutely free
There you have it there it is you now have a start
You can launch yourself a cluster without even a credit card
17. Plant a seed, grow a tree,
Atlas for Enterprise MongoDB
18. You create a project named “The Future Is Bright”
Choose an M0 and name it “Sales-Guiding-Light”
Load some sample data just to get a feel for it all
And in just a few minutes you’re flying off the wall
19. With instructions to connect with a shell or a driver
You’ve used a ton of Cloud tools, but something here just feels finer
You navigate to Data Explorer and take it for a spin
Now you have a graphical tool to help you begin
20. This is fun and it’s cool you are totally wired
Your using MongoDB Atlas and you’re completely on fire
Now if only Atlas had a way to connect back
And hook directly in with the rest of the stack
21. Well wouldn’t you know, it CAN satisfy that itch
Look no further than MongoDB Stitch
With a few clicks you start your app in a jiffy
Pull down some SDKs then post a celebratory giphy
22. You code through the night with excitement and passion
Aided by coffee to keep you from crashing
And when the sun rises you’re ready to go
With a small MVP you’re excited to show
23. You spring out the door and head back to the office
You’re used to playing defense, but now your on offense
Walk to your manager’s desk and give a warm greeting
Good morning, today, I would like to setup a meeting
24. You pitch your idea and you bring all the hype
She is very impressed with your prototype
Let’s do it she says and flashes a grin
I’ll find some users; let the beta begin
25. And low and behold the train starts to roll
The users dive in and you’re hitting your goal
They all enjoy taking the app for a drive
You can’t contain your excitement - It’s alive; It’s alive!
26. Then you hear your manager with the voice of a god
It’s time that we take your new app to prod
You smile ear to ear because you already know
With MongoDB Atlas it is easy to grow
27. Plant a seed, grow a tree,
Atlas for Enterprise MongoDB
28. So back to your desk you go in a hurry
You open the Atlas console and without a worry
Pop in the corporate credit card and with no hesitation
Choose an M30 and launch a live data migration
29. Within a few minutes, you’ve gone free to paid
Now this is how all apps are supposed to be made
Atlas lets you grow to meet all your needs
No unexpected charges or strange hidden fees
30. And so we fast forward just a short while
The app is a hit and your career’s grown a mile
You hit all your targets then what do you know
You get called to the office of Madame C-I-S-O
31. I see that your app is a real big success
But it’s not security compliant like all of the rest
You should not have jumped in without consulting me
I have many reservations about Atlas from MongoDB
32. We require single sign on and data encryption at rest
We need robust auditing so what do you suggest?
You must understand there are threats all around
I’m afraid without these we need to shut this thing down
33. And just like that it feels like your world’s crashing out
You head back to your desk and you’re starting to pout
When once again Atlas shows you the way
You find the Advanced Security features to save the day
34. You decide to tackle each requirement one by one
Starting with LDAPS for single sign on
You flip the switch and to your surprise
It only takes four fields to bring it to life
35. You specify a server using hostname and port
Put in bind user credentials to get out the door
Then click a button and with just a short wait
You sit back and let Atlas go validate
36. Because in order to keep your cluster nice and stable
Bad LDAP settings in Atlas will never be enabled
When validation completes you have piece of mind
That your user’s credentials to this database shall bind
37. You learn that the system handles many complications
Like self signed certificates or user authorization
For those in the crowd unfamiliar with these
I will explain if you will allow me please
38. When you enable LDAPS with authentication
You specify each user in Atlas for verification
And to these users, roles and permissions you assign
To grant them proper access to the features they need to find
39. Another option is to turn on authorization
With this you use LDAP groups for validation
Instead of specifying users, you punch in the groups
And to those assign the roles and permissions you choose
40. You then manage the users within your LDAP group
Right on your own server to close out the loop
Then on the Atlas the console this config you can view
Or edit your settings however you choose to do
41. Before we move on, let me share with you a trick
Called UserToDN mapping to make those long usernames slick
When you specify these you can filter the name
Down to something simple and easier to maintain
42. Now back to our story you’re at it with zest
Onto the next feature, Encryption At Rest
You’ve come to learn that your great company
Wants to manage data encryption using their own KMS key
43. You are again pleased to find that Atlas makes this a cinch
With the flip of a switch you are out of a pinch
You select your company’s provider, Google Cloud KMS
And are amazed that it works with your cluster hosted in AWS
44. Now one thing to note before our story moves on
Your data is encrypted on disk even without this feature on
The Encryption At Rest feature adds another layer higher
Using a key you manage within your own cloud provider
45. At any point in time you decide to revoke
MongoDB’s access to your data files will quickly choke
And just to ensure you don’t make a mistake
Atlas will send you alerts letting you know right away
46. By default, Atlas reminds you to rotate your key
And encourages best practices for data safety
Now back to our story as quick as can be
To the next challenge we overcome with Atlas for MongoDB
47. With two requirements checked off for the C-I-S-O
You’ve now got two down with one to left to go
You recall the need to track each and every thing
Which leads you to database au-di-ting
48. Just like the others it takes one simple click
You turn on this feature start tracking things quick
And even though the config requires M-Q-L
You find Atlas has a filter builder that is slick as h***
49. You quickly choose the actions that the CISO requires
And realize you can audit anything your heart desires
You check off the options to fit all your needs
Then look at the JSON version ‘cause it’s really neat
50. You check out the results by downloading the log
And make sure it is perfect before moving on
Now you’re back to feeling good in just a short time
You pick up the phone and get the CISO on the line
{
"atype": "authCheck",
"ts": { "$date": "2019-06-06T18:42:22.037+0000" },
"local": { "ip": "192.168.254.200", "port": 27017 },
"remote": { "ip": "192.168.254.200", "port": 35768 },
"users": [{ "user": "mms-monitoring-agent", "db": "admin" }],
"roles": [{ "role": "clusterMonitor", "db": "admin" }],
"param": {
"command": "find",
"ns": "local.system.replset",
"args": {
"find": "system.replset",
"filter": {},
"$clusterTime": {
"clusterTime": { "$timestamp": { "t": 1559846535, "i": 1 } },
"signature": {
"hash": {
"$binary": "Mk5DkojrxprRP6ucrwYQsOMmVlo=",
"$type": "00"
},
"keyId": { "$numberLong": "6699237443670900737" }
}
},
"$db": "local",
"$readPreference": { "mode": "nearest" }
}
},
"result": 0
}
51. Hello there my friend I am pleased to announce
That my lovely app will not have to shut down
You see I was able to quickly comply
With the security requirements you gave when I last dropped by
52. That doesn’t seem possible how can it be
That you did this so quickly with MongoDB
How does Atlas handle security with such ease
You now have my interest, tell me more please
53. So you sit down for a chat and show her around
It’s an out of office experience; you’re in MongoDB town
While you have the floor and are navigating about
You demo some cool new features inside and out
54. Plant a seed, grow a tree,
Atlas for Enterprise MongoDB
55. Before we move on, let’s take a break
Our story moves quickly with lots at stake
Please take a moment to stretch out up and down
Stand up for a second and move your body around
56. Step side to side lean left and then right
Take a deep breath and hold it in tight
Now slowly exhale until it all runs out
Nicely done; That’s what I’m talking about!
57. Now back to our tour with the C-I-S-O
Some other fun features you decide to show
You explain how for access you need tight controls
So you open the console and build custom roles
58. You choose groups of access to your heart’s desire
Even inherit other roles to make them sing like a choir
Assign them to users until you’re content
When it comes to limitations, there is no extent
59. The CISO is impressed; she calls up some friends
And before you know it, you’re presenting again
But this time the room is full of colleagues
In Atlas for MongoDB we believe
60. You have gone from engineer to technology chooser
You show them how to create a temporary user
You explain how sometimes you need access granted
But just for a short while; you can’t take any chances
61. You create the account and then pick the date
For when this account will automatically terminate
And should you decide to keep it around
Simply choose permanent and it can always be found
62. You show them how this works for whitelisting too
So working from a coffee shop or hotel you can do
And now the room is full of believers
So to close things out you show one more feature
63. You call on the team that analyzes data for you
And explain how Atlas works with their existing BI tools
They stare back at you with a look quite perplexed
And what you show next they do not expect
64. You explain how one queries Mongo with M-Q-L
A language specific to the DB that is cool as h***
But all of those popular BI apps that we choose
Like Tableau and QlikView that we love to use
65. All speak the language that we call SQL
To which MongoDB does not have an equal
But fear not you say like a big super hero
Enable the BI Connector and say “FUGGED ABOUT IT” like Deniro
66. You show how this lets Mongo speak SQL too
So it looks relational to these popular tools
The data analytics team is very grateful see
And jump right onboard with Atlas for MongoDB
67. The crowd applauds loudly and you take a bow
In this big old company you can innovate now
What started as a journey to build something cool
Has led you to a career that is fun, exciting, and new
68. And so we leave our hero in a good, happy place
To take on any new challenges they might face
I hope that when you go and leave here today
With MongoDB Atlas you too shall go play
69. I hope that Atlas for you is as fun to use
As it is for our team to build it for you
So on behalf of myself, Marko, Fiona, and Josh
Natalie, Greg, Daniel, and Alek; we thank you a lot
70. For taking the time to be here today
Now go out and build great things your own way
I will now give you some demos and show you around
If you have any questions, I can answer them now
71. Plant a seed, grow a tree,
Atlas for Enterprise MongoDB