By MongoDB, Inc
تم التحديث بتاريخ 24th Nov 2024
بواسطة MongoDB, Inc
The typical implementation process for MongoDB Atlas involves the following steps:
Create a MongoDB Atlas Account: This is a quick process, typically taking only a few minutes to register on the MongoDB Atlas website.
Configure Billing (Optional but recommended): Set up billing preferences, which can be integrated with AWS for simplified management.
Deploy a Cluster: Choose cluster specifications such as size, geographic location, and cloud provider. This step can take anywhere from a few minutes for a small cluster to about an hour for larger, more complex configurations.
Configure Network Access and Security; Set up IP whitelisting and create database users. This typically takes 10-15 minutes, depending on the complexity of your security requirements.
Connect to the Cluster: Choose a connection method (e.g., MongoDB Shell, application driver, or MongoDB Compass). Connection setup usually takes 5-10 minutes.
Load Data (Optional): Import existing data or use sample datasets provided by Atlas. Data import time varies greatly depending on the volume of data, ranging from minutes to hours.
MongoDB Atlas customization process:
MongoDB Compass Customization: MongoDB Compass allows administrators to customize user access and privacy settings. This includes hiding credentials, automating the launch of Compass, and using a common configuration file for consistent user experiences across multiple team members.
Atlas UI Personalization: MongoDB Atlas provides options to personalize the Atlas UI, such as customizing date and time formats, and appearance settings. Users can update their preferences through the Atlas UI to tailor the interface to their needs.
Atlas Charts Customization: Atlas Charts offers extensive customization options for visualizations, including general customization (color palettes, label sizes, legends), axes customization, field-level options (number formats, date formats), and conditional formatting. These options allow users to tailor the appearance and functionality of their charts to better fit their data presentation needs.
Configuration File Options: MongoDB allows extensive customization through configuration files. Users can configure various aspects of mongod and mongos instances, such as system logs, process management, network settings, security options, and storage settings. This flexibility enables businesses to tailor MongoDB deployments to their specific operational requirements.
MongoDB Atlas provides a variety of training and support options for new users to help them get started and optimize their usage. Here's a breakdown of their offerings:
Online Documentation:
Covers setup, cluster management, security, performance optimization, and more.
MongoDB University;
Popular courses include MongoDB Basics and Data Modeling with MongoDB.
Video Tutorials and Webinars:
Live webinars and recorded sessions on best practices and advanced features.
Security measures MongoDB Atlas adheres to are listed below:
Authentication Mechanisms: MongoDB Atlas supports several authentication mechanisms, including SCRAM (default), x.509 Certificate Authentication, LDAP proxy authentication, and Kerberos authentication.
Authorization: Role-Based Access Control (RBAC): MongoDB employs RBAC to govern access, allowing the assignment of roles with specific permissions to users.
Encryption:
Data at Rest: MongoDB Enterprise and MongoDB Atlas offer encryption for data at rest using Customer Key Management.
Data in Transit: All data in transit is encrypted using TLS/SSL by default.
Auditing: Capabilities: MongoDB Atlas provides advanced auditing capabilities, logging access and actions executed against the database, including schema operations and authentication events.
IP Access Control: IP Whitelisting: MongoDB Atlas allows connections only from addresses specified in the IP access list, enhancing security by restricting access to trusted IPs.
Network Security: VPC Peering and Private Endpoints: Atlas supports network peering connections and private endpoints to secure deployments hosted on AWS, Azure, and Google Cloud.
Client-Side Field Level Encryption: Field-Level Protection: MongoDB allows encryption at the field level, protecting sensitive information from unauthorized access even by administrators.
Major Releases:
These are identified by a change in the number to the left of the first decimal point (e.g., 4.0, 5.0).
Major Releases are supported for 30 months from their release date.
Examples include MongoDB 4.0 (June 2018, EOL April 2022) and MongoDB 5.0 (July 2021, EOL October 2024).
Rapid Releases:
Identified by a change in the middle number between the two decimal points (e.g., 5.1, 5.2).
These are typically released quarterly in periods without a Major Release.
Rapid Releases are only supported within MongoDB Atlas and not for on-premises deployments.
Examples include MongoDB 5.1 (November 2021, EOL January 2022) and MongoDB 6.1 (October 2022, EOL February 2023).
Patch Releases:
Identified by a change in the number to the right of the second decimal point (e.g., 4.0.1, 4.0.2).
These releases include bug fixes and minor improvements and are supported within the same timeframe as the leading Major Release.
Management of Releases:
Support Policy: MongoDB Atlas supports each Major Release for 30 months from its release date. All GA Patch Releases within a Major Release series are supported within the same timeframe as the leading Major Release.
Extended Lifecycle Support: MongoDB Atlas offers extended support for up to 2 years beyond the standard support period through the MongoDB Extended Lifecycle Support Add-On.
MongoDB Atlas data ownership and portability explanation:
Data Ownership:
Customer Control: MongoDB's Data Processing Agreement (DPA) emphasizes that customers retain control over their data. MongoDB processes customer data only as instructed by the customer and in accordance with the MongoDB Agreement and applicable data protection laws.
Data Subject Requests: MongoDB provides tools and assistance to customers to help them respond to data subject requests, such as retrieving, correcting, or deleting personal data.
Data Portability:
Data Retrieval: Customers can retrieve their data at any time during the term of their MongoDB Agreement. Upon termination of the agreement, customers can also request the deletion of their data.
Data Transfers: MongoDB ensures that data transfers comply with applicable data protection laws, including the use of standard contractual clauses and certifications to frameworks like the EU-US Data Privacy Framework.
Scalability process for MongoDB Atlas:
Horizontal Scaling (Scaling Out):
Sharding: MongoDB uses sharding to distribute data across multiple servers or nodes. Each shard is responsible for a subset of the data, and together they form a sharded cluster. This approach allows for parallel processing and improved scalability.
Replica Sets: Horizontal scaling can also involve using replica sets to ensure high availability and fault tolerance. Each replica set consists of multiple copies of the data, distributed across different servers.
Vertical Scaling (Scaling Up):
Upgrading Hardware: Vertical scaling involves increasing the capacity of individual servers by adding more CPU, RAM, or storage resources. This can be effective up to a certain limit but has its constraints.
MongoDB Atlas: MongoDB Atlas makes it simple to vertically scale up or down as needed. Auto-scaling can be enabled to ensure that resources always meet the demands, scaling up when CPU and RAM utilization surpass 75% within an hour and scaling down when it drops below 50%.
Auto-Scaling: Automatic Adjustments: MongoDB Atlas can automatically scale cluster storage up but does not automatically scale storage down. Manual intervention is required to reduce cluster storage.
The terms and conditions of MongoDB Atlas:
Contract Renewal:
Automatic Renewal: Subscriptions typically have a term of one year and automatically renew for successive one-year terms unless either party provides written notice of non-renewal at least 90 days prior to the end of the current term.
Notification: Either party may elect not to renew a subscription by providing written notice to the other party at least 90 days before the end of the then-current term.
Contract Cancellation:
Termination for Convenience: Either party can terminate the contract by providing written notice 90 days prior to the end of the current term, if not specified otherwise in the Order Form.
Termination for Cause: Either party can terminate the contract immediately after providing written notice of a material breach that remains unresolved within 30 days following receipt of such notice. Non-payment of fees and prohibited uses are considered material breaches.
Effect of Termination: Upon termination, all order forms will concurrently terminate, all rights and licenses of the customer will be terminated, and the customer must return or destroy all copies of the platform and confidential information in its possession.
Refunds: If the customer terminates the contract for convenience or if MongoDB terminates the contract for a material breach by the customer, no refund of any fees already paid will be made. For other causes of termination, fees will be refunded pro rata.
Outstanding Payments: Before canceling a subscription, ensure there are no outstanding amounts to be paid. MongoDB charges the credit card associated with the account for any remaining charges upon subscription expiration.
Additional Terms:
Audit Rights: MongoDB reserves the right to audit the customer's records relating to the use of the software, support, and subscriptions to verify compliance with the agreement. This audit can occur during the term and for one year following termination or expiration, but no more than once a year.
MongoDB Atlas adheres to the following compliance standards:
ISO 9001:2015:
Description: An international standard for quality management systems (QMS) that emphasizes delivering consistent product and service quality.
Significance: Demonstrates MongoDB's commitment to maintaining a robust QMS, ensuring long-term consistency in product and service quality.
2. ISO/IEC 27001:2013:
Description: A globally recognized standard for information security management systems (ISMS), mandating numerous controls for establishing, maintaining, and certifying an ISMS.
Scope: Covers MongoDB Atlas, Atlas App Services, MongoDB Atlas Data Lake, Atlas Serverless, Cloud Manager, and MongoDB Charts.
Significance: Ensures the confidentiality, integrity, and availability of customer-sensitive information across MongoDB's cloud services.
3. ISO/IEC 27017 and ISO/IEC 27018:
Description: Extensions of ISO/IEC 27001, focusing on cloud-specific security controls (ISO 27017) and the protection of personal data in the cloud (ISO 27018).
Significance: Enhances MongoDB's cloud security posture, ensuring compliance with best practices for cloud security and data privacy.
4. TISAX (Trusted Information Security Assessment Exchange):
Description: A certification program for information security in the automotive industry.
Significance: Validates MongoDB's ability to protect highly sensitive data for European automotive customers, ensuring strong business continuity, disaster recovery, and risk mitigation.
5. HDS (Hébergeur de Données de Santé):
Description: A certification issued by the French Public Health Code for hosting personal health data.
Significance: Ensures that French healthcare providers can safely store personal health data in MongoDB Atlas, complying with stringent healthcare data protection regulations.
6. TX-RAMP (Texas Risk and Authorization Management Program):
Description: A certification for cloud providers to meet the security requirements of the State of Texas.
Significance: Ensures that MongoDB Atlas meets the security and compliance needs of public sector organizations in Texas.
7. GDPR (General Data Protection Regulation):
Description: A regulation by the European Union that governs data protection and privacy for individuals within the EU.
Significance: MongoDB supports GDPR compliance through features like geo-sharding, client-side field-level encryption, and robust data management practices.
8. CCPA (California Consumer Privacy Act)
Description: A state statute intended to enhance privacy rights and consumer protection for residents of California.
Significance: MongoDB acts as a service provider under CCPA, ensuring that customer personal data is processed in compliance with CCPA requirements.
9. SOC (System and Organization Controls) Reports:
Description: Independent third-party audits that examine how MongoDB achieves key compliance controls and objectives.