December 2014 Summaries

Storing sensitive data in a MongoDB environment is critical for maintaining compliance and security, especially when dealing with customer names, social security numbers, and health records. To address this, it's essential to consider protecting not only database files but also associated ingress data, egress reports, configuration files, and log files, as sensitive information can appear beyond just the database itself. Additionally, organizations should blind privileged users, such as superusers or root accounts, from viewing actual data stored in these files while still allowing them access to meta file information. Furthermore, using an external key manager to separate key management from data and control who has access to keys is crucial for on-premise and cloud-based MongoDB workloads, especially when dealing with cloud service provider privileged users.

GridFS is a MongoDB feature that stores large binary files by breaking them into smaller chunks and saving them in two collections: `fs.files` and `fs.chunks`. The `fs.files` collection contains metadata for the document, while the `fs.chunks` collection contains the actual binary data. This allows developers to easily store and retrieve large files without having to write custom code to break them up into smaller chunks. GridFS provides a simple API for inserting, retrieving, and deleting binary documents, making it easy to build applications that require storing and serving large files. The feature is designed to be efficient and flexible, allowing developers to customize the metadata fields used in the `fs.files` collection as needed.