Accenture MDR Quick Start Guide for MongoDB Atlas

This quick start guide will help Accenture MDR customers configure MongoDB Atlas to allow log collection from the Log Collection Platform (LCP).

The document includes the following topics:

Supported Versions

A list of supported versions is available in the Accenture MDR Supported Products List document (Accenture_MDR_Supported_Products_List.xlsx) which can be found in Accenture MDR Portal.

Port Requirements

Table 1-1: Port requirements for LCP communication.

Configuring MongoDB Atlas

Below list of steps needs to be carried out for MongoDB configuration

Setup Auditing in MongoDB Atlas

1. Login to your Atlas project.

2. In the Security section of the left navigation, click Advanced.

3. Toggle the button next to Database Auditing to On.

4. Confirm that you want to audit authentication failures.

5. Select the database users, Atlas roles, and LDAP groups whose actions you want to audit in Select users and roles.

6. Select the event actions that you want to audit in Select actions to audit.

7. Click Save.

Create an API Key for a Project

1. Navigate to the Access Manager page for your organization.
   a) If it is not already displayed, select your desired organization from the Organizations menu in the navigation bar.

   b) Click Access Manager in the sidebar, or click Access Manager in the navigation bar, then click your organization.

2. Click Create API Key.

3. Enter the API Key Information.
   a) Enter a Description.

   b) In the Organization Permissions menu, select the new role or roles for the API key.

4. Click Next.

5. Copy and save the Public Key. The public key acts as the username when making API requests.

6. Copy and save the Private Key. The private key acts as the password when making API requests.

7. Add an API Access List Entry.
   a) Click Add Access list Entry.

   b) Enter an <LCP_IP address> or CIDR block from which you want Atlas to accept API requests for this API Key. You can also click Use Current IP Address if the host you are using to access Atlas will also make API requests using this API Key.
   c) Click Save.

8. Click Done.

Create an API Key in an Organization

1. Navigate to the Access Manager page for your organization.
   a) If it is not already displayed, select your desired organization from the Organizations menu in the navigation bar.

   b) Click Access Manager in the sidebar, or click Access Manager in the navigation bar, then click your organization.

2. Click Create API Key.

3. Enter the API Key Information.
   a) Enter a Description.

   b) In the Organization Permissions menu, select the new role or roles for the API key.

4. Click Next.

5. Copy and save the Public Key. The public key acts as the username when making API requests.

6. Copy and save the Private Key. The private key acts as the password when making API requests.

7. Add an API Access List Entry.
   a) Click Add Access list Entry.

   b) Enter an <LCP_IP address>from which you want Atlas to accept API requests for this API Key. You can also click Use Current IP Address if the host you are using to access Atlas will also make API requests using this API Key.
   c) Click Save.

8. Click Done.

Invite an Organization API Key to a Project:

1. Navigate to the Access Manager page for your project.
   a) If it is not already displayed, select the organization that contains your desired project from the Organizations menu in the navigation bar.

   b) Select your desired project from the list of projects in the Projects page.
   c) Click the vertical ellipsis () next to your project name in the upper left corner and select Project Settings.
   d) Click Access Manager in the navigation bar, then click your project.

2. Click the API Keys tab.

3. Add the API Key to the project.
   a) Click Invite to Project.

   b) Type the public key into the field.
   c) In the Project Permissions menu, select the new role or roles for the API key.

4. Click Invite to Project.

GRANT the Project role

1. Navigate to the Access Manager page for your project.
   a) If it is not already displayed, select the organization that contains your desired project from the Organizations menu in the navigation bar.

   b) Select your desired project from the list of projects in the Projects page.
   c) Click the vertical ellipsis () next to your project name in the upper left corner and select Project Settings.
   d) Click Access Manager in the navigation bar, then click your project.

2. Click the API Keys tab.

3. Add the API Key to the project.
   a) Click Invite to Project.

   b) Type the public key into the field.
   c) In the Project Permissions menu, select the new role or roles for the API key.

4. Click Invite to Project.

LCP Configuration Parameters 

Table 1-2: The MongoDB Atlas event collector (API - 5073) properties to be configured by MDR are shown in the table.