MongoDB Atlas

For the following steps, you must have access to a MongoDB Atlas instance and be able to manage Custom Roles and Database Users within it. If you do not have access, please invite your MongoDB Atlas administrator to Rockset.

Create a MongoDB Atlas Integration

The steps below show how to set up a MongoDB Atlas integration using MongoDB SCRAM Authentication mechanism. An integration can provide access to one or more MongoDB collections across different databases in the same MongoDB Atlas cluster. You can use an integration to create Rockset collections that continuously sync data from your MongoDB Atlas collections.

Step 1: Configure MongoDB Atlas Custom Role

1. Navigate to "Database Access" (from left navigation) in your MongoDB Atlas account for the cluster you want to connect to Rockset.
2. Create a new custom role by navigating to "Custom Roles" and clicking "Add New Custom Role". If you already have a role set up for Rockset, you may update that existing role. For more details, refer to MongoDB Atlas documentation on Custom Roles.

3. Set up read-only access to your MongoDB collection. Add the following Actions or roles: find, changeStream, collStats and also enter the names of databases as well as collections for each of these actions or roles. You can update access to databases and collections in Mongo UI at any time without changes required in Rockset integration. The same integration can be used to create more Rockset collections based on permissions.

4. Save the newly created or updated custom role and give it a descriptive name. You will attach this custom role to a new or existing Atlas user.

Why these permissions?

• find - Required for initial collection scan when reading data.
• changeStream - Required for retrieving records from MongoDB Atlas Change Streams.
• collStats - Required for metadata about MongoDB Atlas collections.

Step 2: Configure MongoDB Atlas User

You'll need to create a MongoDB Atlas user to grant Rockset permissions to access your MongoDB resources.

1. Navigate to "Database Access" (from left navigation) in MongoDB Atlas UI.
2. Set up a new user by navigating to "Database Users" and clicking "Add New Database User". Note: If you already have a user for Rockset set up, you may re-use it or update the custom role directly. For more details, refer to MongoDB Atlas documentation on Database Users.

3. Using SCRAM Password authentication enter a username and password for the database user and select the custom role created in Step 1 under "Database User Privileges".

4. Finish by clicking "Add User" and record both username and password in the Rockset Console within a new MongoDB integration. Note that if you change the password later, you will need to drop and recreate the integration in Rockset.

Step 3: Access Connection String

You'll need to provide the connection string for your MongoDB Atlas cluster for Rockset to connect to it.

1. Navigate to the cluster (from left navigation) you want to connect to Rockset and click on "Connect".

2. Select "Connect your application" for connection method.

3. Copy the "Connection String" and record it in the Rockset Console for the integration. Also provide the name of the database that connections will use by default. Connection String looks like mongodb+srv://<username>:<password>@cluster0.mongodb.net/<dbname>. You don't need to replace username, password and dbname tags in the connection string.

Step 4: Add Rockset IPs to IP Access List

To ensure connectivity with Atlas, you must allow the inbound network access from your application environment to MongoDB Atlas by adding Rockset's public IP addresses to your IP Access List. For more details, refer to MongoDB Atlas documentation on IP Access List Entries. This is the most secure and recommended way to allow Rockset to access your MongoDB cluster. Although, if you choose to skip adding Rockset IP address entries, make sure you select "Allow Access From Anywhere" which enables access to the cluster from anywhere.

1. Navigate to "Network Access" (from left navigation) in MongoDB Atlas UI.
2. Click on "Add IP Address" and create IP Access List entries for Rockset's public IP addresses.