{"resources":{"mongo":{"id":"mongo","name":"mongo","fields":{"database":{"name":"database","type":"\u001bmongo.database","title":"MongoDB database","desc":"A database on the server (from listDatabases). Reports the on-disk size and whether the database is empty.","provider":"go.mondoo.com/mql/v13/providers/mongo","is_implicit_resource":true},"instance":{"name":"instance","type":"\u001bmongo.instance","title":"MongoDB server","desc":"A single self-hosted MongoDB server. Exposes version metadata and the security-relevant configuration read from the command-line options and server parameters: whether authentication and role-based access control are enabled (`authenticationEnabled`, `authorizationEnabled`), the cluster authentication mode, TLS posture (`tlsMode`, `tlsDisabledProtocols`, `tlsFIPSMode`), whether server-side JavaScript is enabled, the bound addresses and port, and auditing/logging settings. Principals and databases are reachable through `users`, `roles`, and `databases`, and the full parameter set through `parameters`.","provider":"go.mondoo.com/mql/v13/providers/mongo","is_implicit_resource":true},"parameter":{"name":"parameter","type":"\u001bmongo.parameter","title":"MongoDB server parameter","desc":"A single server parameter from getParameter, selected by `name`. The value is rendered as a string for uniform querying regardless of its native type.","provider":"go.mondoo.com/mql/v13/providers/mongo","is_implicit_resource":true},"role":{"name":"role","type":"\u001bmongo.role","title":"MongoDB role","desc":"A MongoDB role, identified by `role` within its database `db`. `privileges` lists the resource/action grants, `inheritedRoles` the roles it includes, and `isBuiltin` marks the server-provided roles (read, readWrite, root, etc.) versus user-defined ones.","provider":"go.mondoo.com/mql/v13/providers/mongo","is_implicit_resource":true},"user":{"name":"user","type":"\u001bmongo.user","title":"MongoDB user","desc":"A MongoDB user account, identified by `user` within its authentication database `db`. `roles` lists the role grants (each with the database it applies to); `isPrivileged` flags accounts holding a high-privilege built-in role (for example root, __system, or any of the *AnyDatabase roles), the focus of the CIS superuser review.","provider":"go.mondoo.com/mql/v13/providers/mongo","is_implicit_resource":true}},"title":"MongoDB","desc":"Root namespace for all self-hosted MongoDB resources. Query `mongo.instance` for the connected server: its version, configuration, TLS and authentication settings, users, roles, and databases. For MongoDB Atlas (the managed service), use the mongodbatlas provider instead.","min_provider_version":"13.0.0","provider":"go.mondoo.com/mql/v13/providers/mongo"},"mongo.database":{"id":"mongo.database","name":"mongo.database","fields":{"empty":{"name":"empty","type":"\u0004","is_mandatory":true,"title":"Whether the database has no data","provider":"go.mondoo.com/mql/v13/providers/mongo"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Database name","provider":"go.mondoo.com/mql/v13/providers/mongo"},"sizeOnDisk":{"name":"sizeOnDisk","type":"\u0005","is_mandatory":true,"title":"Size of the database on disk, in bytes","provider":"go.mondoo.com/mql/v13/providers/mongo"}},"title":"MongoDB database","desc":"A database on the server (from listDatabases). Reports the on-disk size and whether the database is empty.","min_provider_version":"13.0.0","defaults":"name","provider":"go.mondoo.com/mql/v13/providers/mongo"},"mongo.instance":{"id":"mongo.instance","name":"mongo.instance","fields":{"auditLogDestination":{"name":"auditLogDestination","type":"\u0007","is_mandatory":true,"title":"Audit log destination, or empty when auditing is not configured","provider":"go.mondoo.com/mql/v13/providers/mongo"},"authenticationEnabled":{"name":"authenticationEnabled","type":"\u0004","is_mandatory":true,"title":"Whether client authorization (authentication) is enabled","desc":"True when the server is started with authorization enabled (security.authorization == \"enabled\" or --auth). CIS requires this on.","provider":"go.mondoo.com/mql/v13/providers/mongo"},"authorizationEnabled":{"name":"authorizationEnabled","type":"\u0004","is_mandatory":true,"title":"Whether role-based access control is enforced","desc":"Distinct value name from authenticationEnabled for clarity; both derive from the security.authorization setting.","provider":"go.mondoo.com/mql/v13/providers/mongo"},"bindIp":{"name":"bindIp","type":"\u0007","is_mandatory":true,"title":"Addresses the server binds to (net.bindIp)","provider":"go.mondoo.com/mql/v13/providers/mongo"},"clusterAuthMode":{"name":"clusterAuthMode","type":"\u0007","is_mandatory":true,"title":"Cluster member authentication mode: keyFile, sendKeyFile, sendX509, or x509","provider":"go.mondoo.com/mql/v13/providers/mongo"},"databases":{"name":"databases","type":"\u0019\u001bmongo.database","title":"Databases on the server","provider":"go.mondoo.com/mql/v13/providers/mongo"},"gitVersion":{"name":"gitVersion","type":"\u0007","is_mandatory":true,"title":"Git version the server was built from","provider":"go.mondoo.com/mql/v13/providers/mongo"},"javascriptEnabled":{"name":"javascriptEnabled","type":"\u0004","is_mandatory":true,"title":"Whether server-side JavaScript execution is enabled","desc":"CIS recommends disabling this when not needed (security.javascriptEnabled).","provider":"go.mondoo.com/mql/v13/providers/mongo"},"logVerbosity":{"name":"logVerbosity","type":"\u0005","is_mandatory":true,"title":"System log verbosity level","provider":"go.mondoo.com/mql/v13/providers/mongo"},"parameters":{"name":"parameters","type":"\u0019\u001bmongo.parameter","title":"Server parameters (getParameter '*')","provider":"go.mondoo.com/mql/v13/providers/mongo"},"port":{"name":"port","type":"\u0005","is_mandatory":true,"title":"TCP port the server listens on","provider":"go.mondoo.com/mql/v13/providers/mongo"},"roles":{"name":"roles","type":"\u0019\u001bmongo.role","title":"Roles defined on the server (across databases)","provider":"go.mondoo.com/mql/v13/providers/mongo"},"tlsDisabledProtocols":{"name":"tlsDisabledProtocols","type":"\u0007","is_mandatory":true,"title":"TLS protocol versions explicitly disabled (net.tls.disabledProtocols)","provider":"go.mondoo.com/mql/v13/providers/mongo"},"tlsFIPSMode":{"name":"tlsFIPSMode","type":"\u0004","is_mandatory":true,"title":"Whether FIPS mode is enabled for TLS","provider":"go.mondoo.com/mql/v13/providers/mongo"},"tlsMode":{"name":"tlsMode","type":"\u0007","is_mandatory":true,"title":"TLS mode: disabled, allowTLS, preferTLS, or requireTLS","provider":"go.mondoo.com/mql/v13/providers/mongo"},"users":{"name":"users","type":"\u0019\u001bmongo.user","title":"Users defined on the server (across databases)","provider":"go.mondoo.com/mql/v13/providers/mongo"},"version":{"name":"version","type":"\u0007","is_mandatory":true,"title":"Full server version, for example 7.0.14","provider":"go.mondoo.com/mql/v13/providers/mongo"}},"title":"MongoDB server","desc":"A single self-hosted MongoDB server. Exposes version metadata and the security-relevant configuration read from the command-line options and server parameters: whether authentication and role-based access control are enabled (`authenticationEnabled`, `authorizationEnabled`), the cluster authentication mode, TLS posture (`tlsMode`, `tlsDisabledProtocols`, `tlsFIPSMode`), whether server-side JavaScript is enabled, the bound addresses and port, and auditing/logging settings. Principals and databases are reachable through `users`, `roles`, and `databases`, and the full parameter set through `parameters`.","min_provider_version":"13.0.0","defaults":"version","provider":"go.mondoo.com/mql/v13/providers/mongo"},"mongo.parameter":{"id":"mongo.parameter","name":"mongo.parameter","fields":{"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Parameter name","provider":"go.mondoo.com/mql/v13/providers/mongo"},"value":{"name":"value","type":"\u0007","is_mandatory":true,"title":"Parameter value, rendered as a string","provider":"go.mondoo.com/mql/v13/providers/mongo"}},"title":"MongoDB server parameter","desc":"A single server parameter from getParameter, selected by `name`. The value is rendered as a string for uniform querying regardless of its native type.","min_provider_version":"13.0.0","defaults":"name value","provider":"go.mondoo.com/mql/v13/providers/mongo"},"mongo.role":{"id":"mongo.role","name":"mongo.role","fields":{"db":{"name":"db","type":"\u0007","is_mandatory":true,"title":"Database the role is defined in","provider":"go.mondoo.com/mql/v13/providers/mongo"},"inheritedRoles":{"name":"inheritedRoles","type":"\u0019\u001bmongo.role","title":"Roles this role inherits","provider":"go.mondoo.com/mql/v13/providers/mongo"},"isBuiltin":{"name":"isBuiltin","type":"\u0004","is_mandatory":true,"title":"Whether the role is a built-in MongoDB role","provider":"go.mondoo.com/mql/v13/providers/mongo"},"privilege":{"name":"privilege","type":"\u001bmongo.role.privilege","title":"MongoDB role privilege","desc":"A single privilege granted by a role: a set of `actions` on a resource. The resource is a database/collection (`database`, `collection`) or the whole deployment (`cluster`). A `database` of \"\" with `collection` \"\" and `cluster` false denotes the any-resource grant.","provider":"go.mondoo.com/mql/v13/providers/mongo","is_implicit_resource":true},"privileges":{"name":"privileges","type":"\u0019\u001bmongo.role.privilege","title":"Privileges granted directly by the role","provider":"go.mondoo.com/mql/v13/providers/mongo"},"role":{"name":"role","type":"\u0007","is_mandatory":true,"title":"Role name","provider":"go.mondoo.com/mql/v13/providers/mongo"}},"title":"MongoDB role","desc":"A MongoDB role, identified by `role` within its database `db`. `privileges` lists the resource/action grants, `inheritedRoles` the roles it includes, and `isBuiltin` marks the server-provided roles (read, readWrite, root, etc.) versus user-defined ones.","min_provider_version":"13.0.0","defaults":"role db","provider":"go.mondoo.com/mql/v13/providers/mongo"},"mongo.role.privilege":{"id":"mongo.role.privilege","name":"mongo.role.privilege","fields":{"actions":{"name":"actions","type":"\u0019\u0007","is_mandatory":true,"title":"Actions permitted, for example find, insert, or dropDatabase","provider":"go.mondoo.com/mql/v13/providers/mongo"},"cluster":{"name":"cluster","type":"\u0004","is_mandatory":true,"title":"Whether the privilege targets the whole cluster","provider":"go.mondoo.com/mql/v13/providers/mongo"},"collection":{"name":"collection","type":"\u0007","is_mandatory":true,"title":"Collection the privilege applies to, or empty for all collections","provider":"go.mondoo.com/mql/v13/providers/mongo"},"database":{"name":"database","type":"\u0007","is_mandatory":true,"title":"Database the privilege applies to, or empty for cluster/any-resource","provider":"go.mondoo.com/mql/v13/providers/mongo"}},"title":"MongoDB role privilege","desc":"A single privilege granted by a role: a set of `actions` on a resource. The resource is a database/collection (`database`, `collection`) or the whole deployment (`cluster`). A `database` of \"\" with `collection` \"\" and `cluster` false denotes the any-resource grant.","min_provider_version":"13.0.0","defaults":"actions","provider":"go.mondoo.com/mql/v13/providers/mongo"},"mongo.user":{"id":"mongo.user","name":"mongo.user","fields":{"db":{"name":"db","type":"\u0007","is_mandatory":true,"title":"Authentication database the user is defined in","provider":"go.mondoo.com/mql/v13/providers/mongo"},"isPrivileged":{"name":"isPrivileged","type":"\u0004","is_mandatory":true,"title":"Whether the user holds a high-privilege built-in role","provider":"go.mondoo.com/mql/v13/providers/mongo"},"mechanisms":{"name":"mechanisms","type":"\u0019\u0007","is_mandatory":true,"title":"Authentication mechanisms available for the user, for example SCRAM-SHA-256","provider":"go.mondoo.com/mql/v13/providers/mongo"},"roles":{"name":"roles","type":"\u0019\u001bmongo.role","title":"Roles granted to the user","provider":"go.mondoo.com/mql/v13/providers/mongo"},"user":{"name":"user","type":"\u0007","is_mandatory":true,"title":"User name","provider":"go.mondoo.com/mql/v13/providers/mongo"},"userId":{"name":"userId","type":"\u0007","is_mandatory":true,"title":"User id, as reported by MongoDB (usually \"\u003cdb\u003e.\u003cuser\u003e\")","provider":"go.mondoo.com/mql/v13/providers/mongo"}},"title":"MongoDB user","desc":"A MongoDB user account, identified by `user` within its authentication database `db`. `roles` lists the role grants (each with the database it applies to); `isPrivileged` flags accounts holding a high-privilege built-in role (for example root, __system, or any of the *AnyDatabase roles), the focus of the CIS superuser review.","min_provider_version":"13.0.0","defaults":"user db","provider":"go.mondoo.com/mql/v13/providers/mongo"}}}