Overview
This guide provides a step-by-step process of integrating MongoDB Atlas with Axiom Security.
Prerequisites
Requirement | Details |
Axiom Tenant Admin Access | Necessary for configuring integrations within Axiom Security. |
MongoDB Atlas Admin Rights | Required to create API keys and manage project settings. |
Project Owner Rights | Needed to assign API keys to specific projects within MongoDB Atlas. |
MongoDB Atlas Configuration
Step 1: Create an API Key
Log in to your MongoDB Atlas account.
Click the Settings (gear icon) to access Organization Settings.
Navigate to Access Manager > API Keys.
Click Create API Key.
Provide a description (e.g., "Axiom Integration Key").
Assign Organization Read Only permissions, then click Next.
💡 Note: Please make sure to copy and set aside the following info:
Public Key
Private Key
Organization ID
Project ID
Step 2: Assign Project-Level Permissions
Navigate to Projects > Project Settings.
Under Access Manager > API Keys, click Invite to Project.
Select your previously created API key.
Assign Project Owner permissions and click Invite to Project.
Step 3: IP Access List (If Required)
In Organization > Settings, verify if Require IP Access List for the Atlas Administration API is enabled.
If enabled, add the following Axiom IP addresses via Access Manager > API Access List > Add Access List Entry:
3.120.212.10518.184.175.29
Axiom side
Navigate to the Integrations page from the left-side menu.
Click Add integration in the right-hand corner and select MongoDB Atlas.
General details screen - provide the following:
Name (integration name - e.g., "Production")
Organization ID
Axiom Runner screen - Choose how you want to run your integration:
Option 1 - Use Axiom-managed runner
Option 2 - Use self-hosted Axiom runner
IMPORTANT!If you choose option 2 in the Axiom Runner screen, make sure to create a secret in AWS Secret Manager:
Go to AWS Secrets Manager > Store a new secret.
Secret Name:
axiom-security/mongodbatlas/<organization_id>Secret Value (JSON format):
{
"mongodbatlas_org_id": "<organization_id>",
"mongodbatlas_private_key": "<private_key>",
"mongodbatlas_public_key": "<public_key>"
}Example AWS CLI Command:
aws secretsmanager create-secret --name "axiom-security/mongodbatlas/278364578236478654" --secret-string '{"mongodbatlas_org_id":"<organization_id>","mongodbatlas_private_key":"<private_key>","mongodbatlas_public_key":"<public_key>"}'
Click on Integrate to finalize the setup.