MongoDB Atlas in the AWS Cloud
This Quick Start provisions complete MongoDB Atlas deployments through CloudFormation using official MongoDB Atlas AWS CloudFormation Resource Types.
Includes support for:
- MongoDB Atlas Projects
- MongoDB Atlas Clusters
- MongoDB Atlas Database Users via AWS IAM Integration
- VPC Peering
For architectural details, best practices, step-by-step instructions, and customization options, see the deployment guide.
To post feedback, submit feature ideas, or report bugs, use the Issues section of this GitHub repo. If you'd like to submit code for this Quick Start, please review the AWS Quick Start Contributor's Kit.
If needed, install the awscli and mongocli.
curl "https://awscli.amazonaws.com/awscli-exe-linux-x86_64.zip" -o "/tmp/awscliv2.zip" unzip /tmp/awscliv2.zip sudo /tmp/aws/install MONGOCLI_VERSION="1.7.0" curl -L "https://github.com/mongodb/mongocli/releases/download/${MONGOCLI_VERSION}/mongocli_${MONGOCLI_VERSION}_linux_x86_64.tar.gz" -o "/tmp/mongocli_${MONGOCLI_VERSION}_linux_x86_64.tar.gz" tar xzvf "/tmp/mongocli_${MONGOCLI_VERSION}_linux_x86_64.tar.gz" --directory /tmp cp "/tmp/mongocli_${MONGOCLI_VERSION}_linux_x86_64/mongocli" "~/.local/bin" ~/.local/bin/mongocli --versionMake sure to configure each tool properly.
aws configure mongocli config- Run this helper to setup environment variables for your MongoDB Atlas API keys (read from mongocli config)
source <(./scripts/export-mongocli-config.py)This quickstart is powered by a set of official MongoDB AWS CloudFormation Resource Types which connect your AWS CloudFormation control plane directly into the MongoDB Cloud. Right now, these resources need to be registered in each AWS region prior to use.
Run this command to install the MongoDB Atlas Resource Types into the AWS_REGION of your choice before running the quickstart.
cd mongodbatlas-cloudformation-resources\cfn-resources ./cfn-submit-helper.sh project cluster database-user project-ip-access-list network-peering The quickstart-mongodb-atlas.template.yaml template will provision a complete you MongoDB Atlas Deployment for you.
This includes the follow resources:
- MongoDB::Atlas::Project
- MongoDB::Atlas::ProjectIpAccessList
- MongoDB::Atlas::Cluster
- MongoDB::Atlas::DatabaseUser
- Includes AWS IAM Role Integration
repo_root=$(git rev-parse --show-toplevel) source <(${repo_root}/quickstart-mongodb-atlas/scripts/export-mongocli-config.py) ${repo_root}/quickstart-mongodb-atlas/scripts/launch-x-quickstart.sh ${repo_root}/quickstart-mongodb-atlas/templates/quickstart-mongodb-atlas.template.yaml MongoDB-Atlas-Quickstart ParameterKey=OrgId,ParameterValue=${ATLAS_ORG_ID} The stack will take ~7-10 minutes to provision. When complete you can find the mongodb+srv connection information in the stack outputs.
aws cloudformation describe-stacks --stack-name ${STACK_NAME} | jq -r '.Stacks[0]|.Outputs' When complete, you can connect using the mongo shell.
After the cluster provisions, you can connect with the mongo shell or MongoDB Compass.
Fetch the new cluster mongodb+srv:// host info:
STACK_NAME="mongodb-atlas-quickstart" MDB=$(aws cloudformation list-exports |\ jq -r --arg stackname "${STACK_NAME}" \ '.Exports[] | select(.Name==$stackname+"-standardSrv") | .Value') echo "New ${STACK_NAME} database url: ${MDB}"Use this url along with your aws cli credentials to seamlessly and securly connect to your new MongoDB Atlas database:
STACK_ROLE=$(aws cloudformation describe-stack-resources --stack-name "${STACK_NAME}" --logical-resource-id AtlasIAMRole) ROLE=$(aws iam get-role --role-name $( echo "${STACK_ROLE}" | jq -r '.StackResources[] | .PhysicalResourceId')) ROLE_ARN=$(echo "${ROLE}" | jq -r '.Role.Arn') ROLE_CREDS=$(aws sts assume-role --role-session-name test --role-arn ${ROLE_ARN}) mongo "${MDB}/${STACK_NAME}?authSource=%24external&authMechanism=MONGODB-AWS" \ --username $(echo "${ROLE_CREDS}" | jq -r '.Credentials.AccessKeyId') \ --password $(echo "${ROLE_CREDS}" | jq -r '.Credentials.SecretAccessKey') \ --awsIamSessionToken $(echo "${ROLE_CREDS}" | jq -r '.Credentials.SessionToken')see scripts/aws-iam-mongo-shell.sh.
The quickstart-mongodb-atlas-peering.template.yaml stack will provision a complete you MongoDB Atlas Deployment with VPC Peering for a given AWS VPC enabled.
This includes the follow resources:
- MongoDB::Atlas::Project
- MongoDB::Atlas::ProjectIpAccessList
- MongoDB::Atlas::Cluster
- MongoDB::Atlas::DatabaseUser
- Includes AWS IAM Role Integration
- MongoDB::Atlas::NetworkPeering
- With automatic network container management
repo_root=$(git rev-parse --show-toplevel) source <(${repo_root}/quickstart-mongodb-atlas/scripts/export-mongocli-config.py) ${repo_root}/quickstart-mongodb-atlas/scripts/launch-x-quickstart.sh ${repo_root}/quickstart-mongodb-atlas/templates/quickstart-mongodb-atlas-peering.template.yaml MongoDB-Atlas-Quickstart ParameterKey=OrgId,ParameterValue=${ATLAS_ORG_ID} ParameterKey=RouteTableCIDRBlock,ParameterValue=192.168.0.0/24 ParameterKey=VPC,ParameterValue=<YOUR_VPC_ID> The stack will take ~7-10 minutes to provision. When complete you can find the mongodb+srv connection information in the stack outputs.
aws cloudformation describe-stacks --stack-name ${STACK_NAME} | jq -r '.Stacks[0]|.Outputs' TODO add steps for connect with vpc, add a test lambda function in vpc?