MongoDB Atlas Keys

Description

General

• Documentation: https://www.mongodb.com/docs/atlas/

• Summary: MongoDB Atlas is a Database-as-a-Service provider based on the MongoDB database. It can be accessed programmatically using a public key and a private key.

• IPs allowlist: An API access list can be configured to limit the usage of the credentials, see documentation.

• Scopes: The scope is configured when creating the credentials. See the available scopes in the documentation.

Revoke the secret

Access can be revoked from the MongoDB Atlas CLI or UI, see documentation

Check for suspicious activity

Activities can be reviewed using the Activity Feed, see documentation.

Details for MongoDB Atlas Keys

• Family: credentials

• Category: data_storage

• Company: MongoDB

• High recall: False

• Validity check available: True

• Analyzer available: False

• On-premise instances exist: False

• Only valid secrets raise an alert: False

• Minimum number of matches: 2

• Occurrences found for one million commits: 0.05

• Prefixed: False

• PreValidators:

- type: ContentWhitelistPreValidator
  patterns:
    - atlas
    - mongodb
- type: ContentWhitelistPreValidator
  patterns:
    - '[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}'

Examples

- text: |
    ATLAS_PUBLIC_KEY=vfvdgfrm
    ATLAS_PRIVATE_KEY=64bcf3dc-d1ef-4092-9f22-c2e244d440d9
  client_id: vfvdgfrm
  client_secret: 64bcf3dc-d1ef-4092-9f22-c2e244d440d9