Video Transcript (English)

In this unit, you’ve learned the fundamental concepts and skills necessary for securing self-managed MongoDB database deployments.

Let’s review some specifics of what we covered in this unit.

We started with an introduction to three requirements for securing modern application data: authentication, authorization, and auditing.

Then, we went through the steps to enable authentication on a standalone `mongod` instance by using SCRAM, MongoDB’s default authentication mechanism.

We also set up authorization with Role-Based Access Control, and assigned and removed roles from users.

Then we turned to auditing and worked through the steps to access an audit log file.

We then moved on to encryption, which we defined as the encoding of data so that only authorized entities can read it.

We discussed three categories of encryption—transport encryption, encryption at rest,and encryption in-use—and covered how MongoDB supports each one.

Finally, we went through the procedure to deploy a three-member replica set that uses and accepts only TLS-encrypted connections.

Congratulations on completing this unit!

If you want to extend your MongoDB security skills, you may be interested in learning about security for MongoDB Atlas deployments.

You may also want to explore more advanced security topics that are relevant to self-managed MongoDB deployments, like LDAP or Kerberos authentication.