Self-Managed Database Security
Learn about basic security concepts and encryption. Then, you'll learn about the security features provided by MongoDB to help keep your deployments secure.
MongoDB Self-Managed Database Security
Unit Overview
In this unit, you'll start by learning about three key security concepts: authentication, authorization, and auditing. Then, you'll explore three categories of encryption: transport encryption, encryption at rest, and in-use encryption. Finally, you'll learn the steps for deploying a replica set with encrypted connections.
Prerequisites
Lessons in This Unit
- Lesson 1 – Introduction to Security
- Lesson 2 – Enabling Authentication for a Self-Managed MongoDB Deployment
- Lesson 3 – Establishing Authorization for a Self-Managed MongoDB Deployment
- Lesson 4 – Security Auditing in MongoDB
- Lesson 5 – Introduction to Encryption Concepts
- Lesson 6 – Encryption in Self-Managed MongoDB Deployments
- Lesson 7 – Enabling Network Encryption for a Self-Managed MongoDB Deployment
-
01.
-
02.Lesson 2: Enabling Authentication for a Self-Managed MongoDB Deployment
- Learn
- Practice
-
03.Lesson 3: Establishing Authorization for a Self-Managed MongoDB Deployment
- Learn
- Practice
-
04.Lesson 4: Security Auditing in MongoDB
- Learn
- Practice
-
05.Lesson 5: Introduction to Encryption Concepts
- Learn
- Practice
-
06.Lesson 6: Encryption in Self-Managed MongoDB Deployments
- Learn
- Practice
-
07.Lesson 7: Enabling Network Encryption for a Self-Managed MongoDB Deployment
- Learn
- Practice
-
08.Conclusion
- Learn
Julianna Chen | University Curriculum Engineer
Julianna is a Senior Curriculum Engineer on the Education team, based in Vancouver, Canada. She’s developed educational content at universities and non-profits for over ten years, and is passionate about supporting access to quality technical education worldwide.
Jordan Smith | Education Engineer
Jordan is an Education Engineer primarily working on MongoDB Driver documentation. Prior to joining MongoDB, Jordan held various Software Engineering positions as a full-stack developer. He is passionate about leveraging his skills and experience to educate and mentor others. Outside of work he spends most of his time reading, rock climbing, and playing music.
Vick Mena | Director, Curriculum
My name is Vick and I've been in the wild for over 25 years. I grew up at IBM working on the BIOS for the IBM eServer line in Austin, TX before moving to Wall St. I've worked on all phases of software development from low-level to middleware to UI but feel most comfortable in the middle. I also drank the devops kool-aid having moved a product line to AWS while at Dow Jones & Co with the help of an amazing team. I then pivoted into the secure space and worked on software/hardware reverse engineering. I always thought I'd eventually teach and this role lets me leverage all of my experience to lead this motley crew of passionate educators.
Emily Pope | Senior Curriculum Designer
Emily is a Senior Curriculum Designer at MongoDB. Prior to MongoDB, Emily worked closely with professors at MIT and Columbia to design bootcamps in full stack development and data science at Emeritus. She also worked as an instructional designer on database and computer science learning experiences at Cengage. Emily loves learning about the everchanging tech space and is passionate about making these skills accessible to a global audience.
Welcome to this unit on securing your self-managed MongoDB database deployments.
We’ll start by covering several basic security concepts, and then you’ll learn how to enable some of MongoDB’s security features.
The content in this unit will apply to you whether you’re working with self-managed deployments on your own hardware, or managing deployments hosted in a cloud environment.
My name is Jordan Smith. I’m a Education Engineer here at MongoDB, and I’ll be your guide through this unit.
Securing your MongoDB databases is crucial to prevent unauthorized access and data breaches.
MongoDB provides all the capabilities you need to protect and control access to valuable and sensitive data. This unit will give you the foundation in using these capabilities to secure your data.
We’ll start by discussing three fundamental security concepts: authentication, authorization, and auditing.
Next, you’ll learn how to enable authentication by using SCRAM, the default authentication mechanism in MongoDB.
You’ll also learn how to set up authorization with Role-Based Access Control for your MongoDB deployment.
Then we’ll cover several important skills you’ll need to start auditing with MongoDB.
After that we’ll turn to encryption. We’ll introduce fundamental encryption concepts, then cover the encryption features that are available for self-managed MongoDB deployments.
Finally, you’ll learn how to enable TLS network encryption on a MongoDB replica set.
Before you begin, you should have a basic understanding of MongoDB databases and database management. You should also be familiar with running commands from a command line interface.
Throughout this unit, you'll have opportunities to practice what you’re learning by completing labs and quizzes that present real-world scenarios. This way, you'll build your knowledge and get comfortable with the software at the same time.
Let’s get started!
