ben.carrasco/prowler
1
0
Fork 0
mirror of https://github.com/prowler-cloud/prowler.git synced 2026-07-24 21:11:53 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(mongodbatlas): update docs links

Browse Source
This commit is contained in:
Andoni A.
2025-07-17 15:51:32 +02:00
parent 6ce9e144d0
commit 5a51a6f76f
8 changed files with 24 additions and 24 deletions
Download Patch File Download Diff File Expand all files Collapse all files
prowler/providers/mongodbatlas/services/clusters/clusters_authentication_enabled/clusters_authentication_enabled.metadata.json
+3 -3
View File
@@ -12,17 +12,17 @@
"ResourceType": "Cluster",
"Description": "Ensure MongoDB Atlas clusters have authentication enabled to prevent unauthorized access",
"Risk": "Without authentication enabled, MongoDB Atlas clusters may be vulnerable to unauthorized access, potentially exposing sensitive data or allowing malicious actions",
"RelatedUrl": "https://www.mongodb.com/docs/atlas/reference/api/clusters-get-one/",
"RelatedUrl": "",
"Remediation": {
"Code": {
"CLI": "",
"NativeIaC": "",
"Other": "https://docs.atlas.mongodb.com/security-authentication/",
"Other": "https://www.mongodb.com/docs/atlas/security/config-db-auth/",
"Terraform": ""
},
"Recommendation": {
"Text": "Enable authentication for MongoDB Atlas clusters by setting authEnabled to true in the cluster configuration.",
"Url": "https://docs.atlas.mongodb.com/security-authentication/"
"Url": "https://www.mongodb.com/docs/atlas/security/config-db-auth/"
}
},
"Categories": [
prowler/providers/mongodbatlas/services/clusters/clusters_backup_enabled/clusters_backup_enabled.metadata.json
+3 -3
View File
@@ -12,17 +12,17 @@
"ResourceType": "Cluster",
"Description": "Ensure MongoDB Atlas clusters have backup enabled to protect against data loss",
"Risk": "Without backup enabled, MongoDB Atlas clusters are vulnerable to data loss in case of failures, corruption, or accidental deletion",
"RelatedUrl": "https://www.mongodb.com/docs/atlas/reference/api/clusters-get-one/",
"RelatedUrl": "",
"Remediation": {
"Code": {
"CLI": "",
"NativeIaC": "",
"Other": "https://docs.atlas.mongodb.com/backup/",
"Other": "",
"Terraform": ""
},
"Recommendation": {
"Text": "Enable backup for MongoDB Atlas clusters by setting backupEnabled to true in the cluster configuration.",
"Url": "https://docs.atlas.mongodb.com/backup/"
"Url": "https://www.mongodb.com/docs/atlas/backup-restore-cluster/"
}
},
"Categories": [
prowler/providers/mongodbatlas/services/clusters/clusters_tls_enabled/clusters_tls_enabled.metadata.json
+3 -3
View File
@@ -12,17 +12,17 @@
"ResourceType": "Cluster",
"Description": "Ensure MongoDB Atlas clusters have TLS authentication required to secure data in transit",
"Risk": "Without TLS enabled, MongoDB Atlas clusters are vulnerable to man-in-the-middle attacks and data interception during transmission",
"RelatedUrl": "https://www.mongodb.com/docs/atlas/reference/api/clusters-get-one/",
"RelatedUrl": "",
"Remediation": {
"Code": {
"CLI": "",
"NativeIaC": "",
"Other": "https://docs.atlas.mongodb.com/security-connection/",
"Other": "",
"Terraform": ""
},
"Recommendation": {
"Text": "Enable TLS for MongoDB Atlas clusters by setting sslEnabled to true in the cluster configuration.",
"Url": "https://docs.atlas.mongodb.com/security-connection/"
"Url": "https://www.mongodb.com/docs/atlas/setup-cluster-security/#encryption-in-transit"
}
},
"Categories": [
prowler/providers/mongodbatlas/services/organizations/organizations_api_access_list_required/organizations_api_access_list_required.metadata.json
+3 -3
View File
@@ -12,17 +12,17 @@
"ResourceType": "Organization",
"Description": "Ensure organization requires API operations to originate from an IP Address added to the API access list",
"Risk": "Without API access list requirement, API operations can originate from any IP address, increasing the risk of unauthorized access",
"RelatedUrl": "https://www.mongodb.com/docs/atlas/reference/api/organization-get-settings/",
"RelatedUrl": "",
"Remediation": {
"Code": {
"CLI": "",
"NativeIaC": "",
"Other": "https://docs.atlas.mongodb.com/security-api-access-list/",
"Other": "",
"Terraform": ""
},
"Recommendation": {
"Text": "Enable API access list requirement for the organization by setting apiAccessListRequired to true in the organization settings.",
"Url": "https://docs.atlas.mongodb.com/security-api-access-list/"
"Url": "https://www.mongodb.com/docs/atlas/security/ip-access-list/"
}
},
"Categories": [
prowler/providers/mongodbatlas/services/organizations/organizations_mfa_required/organizations_mfa_required.metadata.json
+3 -3
View File
@@ -12,17 +12,17 @@
"ResourceType": "Organization",
"Description": "Ensure organization requires users to set up Multi-Factor Authentication (MFA) before accessing the organization",
"Risk": "Without MFA requirement, user accounts are vulnerable to credential-based attacks and unauthorized access",
"RelatedUrl": "https://www.mongodb.com/docs/atlas/reference/api/organization-get-settings/",
"RelatedUrl": "",
"Remediation": {
"Code": {
"CLI": "",
"NativeIaC": "",
"Other": "https://docs.atlas.mongodb.com/security-multi-factor-authentication/",
"Other": "https://www.mongodb.com/docs/atlas/security-multi-factor-authentication/",
"Terraform": ""
},
"Recommendation": {
"Text": "Enable MFA requirement for the organization by setting multiFactorAuthRequired to true in the organization settings.",
"Url": "https://docs.atlas.mongodb.com/security-multi-factor-authentication/"
"Url": "https://www.mongodb.com/docs/atlas/security-multi-factor-authentication/"
}
},
"Categories": [
prowler/providers/mongodbatlas/services/organizations/organizations_security_contact_defined/organizations_security_contact_defined.metadata.json
+3 -3
View File
@@ -12,17 +12,17 @@
"ResourceType": "Organization",
"Description": "Ensure organization has a security contact defined to receive security-related notifications",
"Risk": "Without a security contact, the organization may not receive important security notifications and alerts",
"RelatedUrl": "https://www.mongodb.com/docs/atlas/reference/api/organization-get-settings/",
"RelatedUrl": "",
"Remediation": {
"Code": {
"CLI": "",
"NativeIaC": "",
"Other": "https://docs.atlas.mongodb.com/security-contact/",
"Other": "",
"Terraform": ""
},
"Recommendation": {
"Text": "Set a security contact email address in the organization settings to receive security-related notifications.",
"Url": "https://docs.atlas.mongodb.com/security-contact/"
"Url": "https://www.mongodb.com/docs/atlas/tutorial/manage-organization-settings/#add-security-contact-information"
}
},
"Categories": [
prowler/providers/mongodbatlas/services/organizations/organizations_service_account_secrets_expiration/organizations_service_account_secrets_expiration.metadata.json
+3 -3
View File
@@ -12,17 +12,17 @@
"ResourceType": "Organization",
"Description": "Ensure organization has a maximum period before expiry for new Atlas Admin API Service Account secrets",
"Risk": "Without proper expiration limits, service account secrets may remain valid for extended periods, increasing security risks",
"RelatedUrl": "https://www.mongodb.com/docs/atlas/reference/api/organization-get-settings/",
"RelatedUrl": "",
"Remediation": {
"Code": {
"CLI": "",
"NativeIaC": "",
"Other": "https://docs.atlas.mongodb.com/security-service-accounts/",
"Other": "",
"Terraform": ""
},
"Recommendation": {
"Text": "Set maxServiceAccountSecretValidityInHours to 8 hours or less in the organization settings to ensure service account secrets expire regularly.",
"Url": "https://docs.atlas.mongodb.com/security-service-accounts/"
"Url": "https://www.mongodb.com/docs/api/doc/atlas-admin-api-v2/2025-03-12/operation/operation-getorganizationsettings#operation-getorganizationsettings-200-body-application-vnd-atlas-2023-01-01-json-maxserviceaccountsecretvalidityinhours"
}
},
"Categories": [
prowler/providers/mongodbatlas/services/projects/projects_auditing_enabled/projects_auditing_enabled.metadata.json
+3 -3
View File
@@ -12,17 +12,17 @@
"ResourceType": "Project",
"Description": "Ensure database auditing is enabled to track database operations and security events",
"Risk": "Without auditing enabled, security events and database operations are not logged, making it difficult to detect unauthorized access or troubleshoot issues",
"RelatedUrl": "https://www.mongodb.com/docs/atlas/reference/api/auditing-get-configuration/",
"RelatedUrl": "",
"Remediation": {
"Code": {
"CLI": "",
"NativeIaC": "",
"Other": "https://docs.atlas.mongodb.com/database-auditing/",
"Other": "",
"Terraform": ""
},
"Recommendation": {
"Text": "Enable database auditing for the MongoDB Atlas project by configuring audit filters and destinations.",
"Url": "https://docs.atlas.mongodb.com/database-auditing/"
"Url": "https://www.mongodb.com/docs/atlas/database-auditing/"
}
},
"Categories": [