This file will be accurate post GA of the MongoDB Atlas Resource Provider for CloudFormation
Use AWS CloudFormation to manage MongoDB Atlas.
The quickest way to get started is to launch the official MongoDB Atlas on AWS Quick Start directly on the AWS Console.
Feature requests can be submitted at feedback.mongodb.com - just select "Atlas CloudFormation Resources" as the category or vote for an already suggested feature.
CURRENT BETA INFO: Support questions submitted under the Issues section of this repo will be handled on a "best effort" basis. Bugs should be filed under the Issues section of this repo.
POST GA: Support for the MongoDB Atlas Resource Provider for CloudFormation is provided under MongoDB Atlas support plans, starting with Developer. Please submit support questions within the Atlas UI.
This repository contains utilities which use both the AWS and MongoDB Atlas APIs to progamatically create, destory, or otherwise manage resources in the AWS and MongoDB clouds. This can have costs or other impact so please use these tools with diligence and follow best practices.
The automated workflows require the following secrets to be placed into your Github forks' Settings/Secrets:
AWS_ACCESS_KEY_ID
AWS_SECRET_ACCESS_KEY
AWS_REGION
ATLAS_PUBLIC_KEY
ATLAS_PRIVATE_KEY
ATLAS_ORG_ID
It's necessary to generate and configure an API key for your organization for the acceptance test to succeed. To grant programmatic access to an organization or project using only the API you need to know:
The programmatic API key has two parts: a Public Key and a Private Key. To see more details on how to create a programmatic API key visit https://docs.atlas.mongodb.com/configure-api-access/#programmatic-api-keys.
The programmatic API key must be granted roles sufficient for the acceptance test to succeed. The Organization Owner and Project Owner roles should be sufficient. You can see the available roles at https://docs.atlas.mongodb.com/reference/user-roles.
You must configure Atlas API Access for your programmatic API key. You should allow API access for the IP address from which the acceptance test runs.
Step 1) Create and note your MongoDB Atlas API Key. Step 2) Create and note your AWS Access Key and AWS Secret Key ID. Step 3) Follow the Github docs on how to create a Secret in your clone of this repository.
- AWS CloudFormation CLI
- (Optional - only need if building from source) AWS CloudFormation CLI Go Plugin 1.0
- (Optional - only need if building from source) Go 1.14
The best way to use the resources is with the official MongoDB Atlas on AWS Quick Start CloudFormation templates. The templates folder contains concrete CloudFormation templates you can use to start your own projects.
There are two main parts of this project:
-
quickstart-mongodbatlas This is a mirror of https://github.com/aws-quickstart/quickstart-mongodb-atlas.
-
cfn-resources A set of AWS CloudFormation custom resource providers for MongoDB Atlas Resources. Currently, AWS requires users to manually deploy these resources in each AWS region one one desires to use them in. We support this workflow through the standard AWS cfn submit tooling. Scripts and Github actions are contained in this repository which demonstrate automating this deployment process.
NOTE This process is subject to change during beta. The Quick Start automatically registers the resources for you.
- Please check that you satisfy all the requirements before proceeding.
- Clone this repo.
- A helper script
[cfn-resources/cfn-submit-helper.sh](cfn-submit-helper.sh)will build and submit each resource for you. You can also run thecfn submittool yourself. Note- this step will soon not be required when AWS launch a public registry.
The following command builds and registers all the types used in the quickstart:
cd mongodbatlas-cloudformation-resources\cfn-resources
./cfn-submit-helper.sh project cluster database-user project-ip-access-list network-peering
If you are having difficulty with IAM access, suggest try registering first with the following IAM role here. This activates the public registry extensions by first using the private registry extensions.
The naming scheme for a MongoDB Atlas resource on the AWS CloudFormation Third-Party Public Registry is "MongoDB::Atlas::[RESOURCE NAME]".
Logging for AWS CloudFormation Public extensions is currently disabled. AWS is evaluating if logging is useful for consumers of third party extensions, if this is something you need or would like to request please open a ticket directly with AWS Support.
Please see README for each resource for details on unit and integrated AWS testing.