Company
Date Published
Author
Mat Keep
Word count
1438
Language
English
Hacker News points
None

Summary

MongoDB provides comprehensive security controls to protect its databases, including auditing and encryption. The auditing framework logs all access and actions executed against the database, allowing administrators to construct and filter audit trails for any operation without relying on third-party tools. MongoDB Enterprise Advanced also supports role-based auditing, enabling log and report activities by specific roles, such as userAdmin or dbAdmin. Additionally, MongoDB encrypts data in motion over the network and at rest in permanent storage using SSL/TLS, FIPS 140-2 encryption, and a native encrypted storage engine that minimizes performance overhead. The database also supports key management options for rotating encryption keys without downtime, making it an efficient solution for operational efficiency and performance.