{"resources":{"mongodbatlas":{"id":"mongodbatlas","name":"mongodbatlas","fields":{"apiAccessListRequired":{"name":"apiAccessListRequired","type":"\u0004","title":"Whether an API access list is required for organization API keys and service accounts","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"apiKey":{"name":"apiKey","type":"\u001bmongodbatlas.apiKey","title":"MongoDB Atlas programmatic API key","desc":"A programmatic API key in the organization, keyed by its public key. Covers the description and the roles the key is granted at the organization and project level. The private key is never exposed. Select a key by public key, for example `mongodbatlas.apiKeys.where(description == \"ci\")`.","provider":"go.mondoo.com/mql/providers/mongodbatlas","is_implicit_resource":true},"apiKeys":{"name":"apiKeys","type":"\u0019\u001bmongodbatlas.apiKey","title":"Programmatic API keys in the organization","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"auditConfig":{"name":"auditConfig","type":"\u001bmongodbatlas.auditConfig","title":"MongoDB Atlas database auditing configuration","desc":"The database auditing settings for the project. Covers whether auditing is enabled, whether authorization successes are audited (not just failures), the audit filter, and how the filter was configured.","provider":"go.mondoo.com/mql/providers/mongodbatlas","is_implicit_resource":true},"auditing":{"name":"auditing","type":"\u001bmongodbatlas.auditConfig","title":"Database auditing configuration for the project","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"cloudProviderAccessRole":{"name":"cloudProviderAccessRole","type":"\u001bmongodbatlas.cloudProviderAccessRole","title":"MongoDB Atlas cloud provider access role","desc":"A cloud provider identity (an AWS IAM role, Azure service principal, or GCP service account) that Atlas assumes to access customer cloud resources such as customer-managed encryption keys, keyed by roleId. Covers the provider, the assumed identity, and when it was authorized.","provider":"go.mondoo.com/mql/providers/mongodbatlas","is_implicit_resource":true},"cloudProviderAccessRoles":{"name":"cloudProviderAccessRoles","type":"\u0019\u001bmongodbatlas.cloudProviderAccessRole","title":"Cloud provider access roles configured for the project","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"cluster":{"name":"cluster","type":"\u001bmongodbatlas.cluster","title":"MongoDB Atlas cluster","desc":"A database cluster (deployment) in the project, keyed by name. Covers the MongoDB version and release track, cluster topology, backup and point-in-time-recovery state, encryption-at-rest provider, the minimum enabled TLS protocol, client-log redaction, termination protection, and the per-region provider and instance sizing. Select a cluster by name, for example `mongodbatlas.clusters.where(name == \"prod-0\")`.","provider":"go.mondoo.com/mql/providers/mongodbatlas","is_implicit_resource":true},"clusters":{"name":"clusters","type":"\u0019\u001bmongodbatlas.cluster","title":"Clusters in the project","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"databaseUser":{"name":"databaseUser","type":"\u001bmongodbatlas.databaseUser","title":"MongoDB Atlas database user","desc":"A database user in the project, keyed by the username and authentication database. Covers the authentication mechanism (SCRAM, X.509, AWS IAM, LDAP, or OIDC), the granted roles, the scopes limiting which clusters the user may access, and any automatic deletion time. The password is never exposed. Select a user by username, for example `mongodbatlas.databaseUsers.where(username == \"app\")`.","provider":"go.mondoo.com/mql/providers/mongodbatlas","is_implicit_resource":true},"databaseUsers":{"name":"databaseUsers","type":"\u0019\u001bmongodbatlas.databaseUser","title":"Database users in the project","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"encryptionAtRest":{"name":"encryptionAtRest","type":"\u001bmongodbatlas.encryptionConfig","title":"Encryption-at-rest configuration for the project","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"encryptionConfig":{"name":"encryptionConfig","type":"\u001bmongodbatlas.encryptionConfig","title":"MongoDB Atlas encryption-at-rest configuration","desc":"The customer-managed encryption-at-rest settings for the project. Covers whether encryption at rest with a customer key is enabled for each cloud provider (AWS KMS, Azure Key Vault, Google Cloud KMS) and for search nodes. Key material is never exposed.","provider":"go.mondoo.com/mql/providers/mongodbatlas","is_implicit_resource":true},"genAiFeaturesEnabled":{"name":"genAiFeaturesEnabled","type":"\u0004","title":"Whether generative AI features are enabled for the organization","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"ipAccessList":{"name":"ipAccessList","type":"\u0019\u001bmongodbatlas.networkAccessEntry","title":"Project IP access list entries","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"maxServiceAccountSecretValidityInHours":{"name":"maxServiceAccountSecretValidityInHours","type":"\u0005","title":"Maximum validity in hours for service account secrets, 0 when unlimited","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"multiFactorAuthRequired":{"name":"multiFactorAuthRequired","type":"\u0004","title":"Whether multi-factor authentication is required for all organization members","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"networkAccessEntry":{"name":"networkAccessEntry","type":"\u001bmongodbatlas.networkAccessEntry","title":"MongoDB Atlas project IP access list entry","desc":"A single entry in the project's IP access list, keyed by its CIDR block or IP address. Only clients matching an entry may reach the project's clusters. Covers the CIDR block or address, an optional AWS security group, and any automatic expiry. Select an entry by value, for example `mongodbatlas.ipAccessList.where(cidrBlock == \"10.0.0.0/24\")`.","provider":"go.mondoo.com/mql/providers/mongodbatlas","is_implicit_resource":true},"networkPeering":{"name":"networkPeering","type":"\u001bmongodbatlas.networkPeering","title":"MongoDB Atlas network peering connection","desc":"A VPC or VNet peering connection between the project's Atlas network and a customer network, keyed by id. Covers the cloud provider, the peered network identifiers, and the connection status. Fields vary by provider.","provider":"go.mondoo.com/mql/providers/mongodbatlas","is_implicit_resource":true},"networkPeerings":{"name":"networkPeerings","type":"\u0019\u001bmongodbatlas.networkPeering","title":"Network peering connections for the project","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"orgUser":{"name":"orgUser","type":"\u001bmongodbatlas.orgUser","title":"MongoDB Atlas organization member","desc":"A user account that is a member of the organization, keyed by username (the login email). Covers the membership status, the organization-level roles, per-project role assignments, team memberships, and the last authentication time. Select a member by username, for example `mongodbatlas.orgUsers.where(username == \"alice@example.com\")`.","provider":"go.mondoo.com/mql/providers/mongodbatlas","is_implicit_resource":true},"orgUsers":{"name":"orgUsers","type":"\u0019\u001bmongodbatlas.orgUser","title":"Organization members","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"organizationId":{"name":"organizationId","type":"\u0007","title":"Organization id","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"organizationName":{"name":"organizationName","type":"\u0007","title":"Organization name","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"privateEndpointService":{"name":"privateEndpointService","type":"\u001bmongodbatlas.privateEndpointService","title":"MongoDB Atlas private endpoint service","desc":"A private endpoint service configured for the project on a single cloud provider, keyed by id. Private endpoints let clients reach clusters over the cloud provider's private network instead of the public internet. Covers the cloud provider, region, status, and the underlying endpoint identifiers.","provider":"go.mondoo.com/mql/providers/mongodbatlas","is_implicit_resource":true},"privateEndpoints":{"name":"privateEndpoints","type":"\u0019\u001bmongodbatlas.privateEndpointService","title":"Private endpoint services configured for the project","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"project":{"name":"project","type":"\u001bmongodbatlas.project","title":"MongoDB Atlas project","desc":"A project (also called a group) in the organization, keyed by id. Covers the owning organization, the number of clusters, the creation time, and any government region restrictions. Select a project by name, for example `mongodbatlas.projects.where(name == \"production\")`.","provider":"go.mondoo.com/mql/providers/mongodbatlas","is_implicit_resource":true},"projectConfig":{"name":"projectConfig","type":"\u001bmongodbatlas.projectConfig","title":"MongoDB Atlas project feature settings","desc":"Feature toggles for the project, such as whether the Data Explorer and its generative AI features are enabled and whether the performance and schema advisors are active. These govern which in-console data-access and analysis features are exposed.","provider":"go.mondoo.com/mql/providers/mongodbatlas","is_implicit_resource":true},"projectSettings":{"name":"projectSettings","type":"\u001bmongodbatlas.projectConfig","title":"Project feature settings","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"projects":{"name":"projects","type":"\u0019\u001bmongodbatlas.project","title":"Projects in the organization","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"restrictEmployeeAccess":{"name":"restrictEmployeeAccess","type":"\u0004","title":"Whether MongoDB support employee access to organization infrastructure is restricted","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"securityContact":{"name":"securityContact","type":"\u0007","title":"Email address that receives security notifications for the organization","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"serviceAccount":{"name":"serviceAccount","type":"\u001bmongodbatlas.serviceAccount","title":"MongoDB Atlas service account","desc":"A service account in the organization, keyed by its client id. Covers the granted organization roles and the secrets issued to it (their ids and expiry times, never the secret values). Select an account by client id, for example `mongodbatlas.serviceAccounts.where(name == \"automation\")`.","provider":"go.mondoo.com/mql/providers/mongodbatlas","is_implicit_resource":true},"serviceAccounts":{"name":"serviceAccounts","type":"\u0019\u001bmongodbatlas.serviceAccount","title":"Service accounts in the organization","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"team":{"name":"team","type":"\u001bmongodbatlas.team","title":"MongoDB Atlas team","desc":"A team in the organization, keyed by name. Teams group members for role assignment on projects. Select a team by name, for example `mongodbatlas.teams.where(name == \"platform\")`.","provider":"go.mondoo.com/mql/providers/mongodbatlas","is_implicit_resource":true},"teams":{"name":"teams","type":"\u0019\u001bmongodbatlas.team","title":"Teams in the organization","provider":"go.mondoo.com/mql/providers/mongodbatlas"}},"title":"MongoDB Atlas","desc":"Entry point to a MongoDB Atlas organization and its projects. Connecting to an organization exposes organization-wide security settings and identity through the organizationName, multiFactorAuthRequired, apiAccessListRequired, restrictEmployeeAccess, orgUsers, teams, apiKeys, and serviceAccounts fields, and enumerates every project through the projects field. Connecting to a single project exposes that project's security surface through the clusters, databaseUsers, ipAccessList, projectSettings, auditing, encryptionAtRest, privateEndpoints, networkPeerings, and cloudProviderAccessRoles fields.","min_provider_version":"13.0.0","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"mongodbatlas.apiKey":{"id":"mongodbatlas.apiKey","name":"mongodbatlas.apiKey","fields":{"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Description of the key","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"API key id","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"publicKey":{"name":"publicKey","type":"\u0007","is_mandatory":true,"title":"Public key (the non-secret half of the key pair)","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"roles":{"name":"roles","type":"\u0019\n","is_mandatory":true,"title":"Role assignments granted to the key, each with roleName and the org or project it applies to","provider":"go.mondoo.com/mql/providers/mongodbatlas"}},"title":"MongoDB Atlas programmatic API key","desc":"A programmatic API key in the organization, keyed by its public key. Covers the description and the roles the key is granted at the organization and project level. The private key is never exposed. Select a key by public key, for example `mongodbatlas.apiKeys.where(description == \"ci\")`.","min_provider_version":"13.0.0","defaults":"publicKey description","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"mongodbatlas.auditConfig":{"id":"mongodbatlas.auditConfig","name":"mongodbatlas.auditConfig","fields":{"auditAuthorizationSuccess":{"name":"auditAuthorizationSuccess","type":"\u0004","is_mandatory":true,"title":"Whether successful authorization events are audited in addition to failures","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"auditFilter":{"name":"auditFilter","type":"\u0007","is_mandatory":true,"title":"JSON audit filter selecting which events are recorded","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"configurationType":{"name":"configurationType","type":"\u0007","is_mandatory":true,"title":"How the audit filter was configured (NONE, FILTER_BUILDER, or FILTER_JSON)","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"enabled":{"name":"enabled","type":"\u0004","is_mandatory":true,"title":"Whether database auditing is enabled","provider":"go.mondoo.com/mql/providers/mongodbatlas"}},"title":"MongoDB Atlas database auditing configuration","desc":"The database auditing settings for the project. Covers whether auditing is enabled, whether authorization successes are audited (not just failures), the audit filter, and how the filter was configured.","min_provider_version":"13.0.0","defaults":"enabled auditAuthorizationSuccess","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"mongodbatlas.cloudProviderAccessRole":{"id":"mongodbatlas.cloudProviderAccessRole","name":"mongodbatlas.cloudProviderAccessRole","fields":{"atlasAWSAccountArn":{"name":"atlasAWSAccountArn","type":"\u0007","is_mandatory":true,"title":"ARN of the Atlas AWS account authorized to assume the role","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"authorizedDate":{"name":"authorizedDate","type":"\t","is_mandatory":true,"title":"Time the role was authorized, null when not yet authorized","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"azureAtlasAppId":{"name":"azureAtlasAppId","type":"\u0007","is_mandatory":true,"title":"Azure service principal application id","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"azureTenantId":{"name":"azureTenantId","type":"\u0007","is_mandatory":true,"title":"Azure tenant id","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"gcpServiceAccount":{"name":"gcpServiceAccount","type":"\u0007","is_mandatory":true,"title":"GCP service account email Atlas uses","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"iamAssumedRoleArn":{"name":"iamAssumedRoleArn","type":"\u0007","is_mandatory":true,"title":"ARN of the AWS IAM role Atlas assumes","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Role id","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"providerName":{"name":"providerName","type":"\u0007","is_mandatory":true,"title":"Cloud provider (AWS, AZURE, or GCP)","provider":"go.mondoo.com/mql/providers/mongodbatlas"}},"title":"MongoDB Atlas cloud provider access role","desc":"A cloud provider identity (an AWS IAM role, Azure service principal, or GCP service account) that Atlas assumes to access customer cloud resources such as customer-managed encryption keys, keyed by roleId. Covers the provider, the assumed identity, and when it was authorized.","min_provider_version":"13.0.0","defaults":"providerName iamAssumedRoleArn","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"mongodbatlas.cluster":{"id":"mongodbatlas.cluster","name":"mongodbatlas.cluster","fields":{"backupEnabled":{"name":"backupEnabled","type":"\u0004","is_mandatory":true,"title":"Whether cloud backup is enabled","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"clusterType":{"name":"clusterType","type":"\u0007","is_mandatory":true,"title":"Cluster topology (REPLICASET, SHARDED, or GEOSHARDED)","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"createDate":{"name":"createDate","type":"\t","is_mandatory":true,"title":"Time the cluster was created","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"encryptionAtRestProvider":{"name":"encryptionAtRestProvider","type":"\u0007","is_mandatory":true,"title":"Encryption-at-rest provider (NONE, AWS, AZURE, or GCP)","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Cluster id","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"minimumEnabledTlsProtocol":{"name":"minimumEnabledTlsProtocol","type":"\u0007","is_mandatory":true,"title":"Minimum enabled TLS protocol (such as TLS1_2)","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"mongoDBMajorVersion":{"name":"mongoDBMajorVersion","type":"\u0007","is_mandatory":true,"title":"Configured MongoDB major version","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"mongoDBVersion":{"name":"mongoDBVersion","type":"\u0007","is_mandatory":true,"title":"Running MongoDB version","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Cluster name","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"paused":{"name":"paused","type":"\u0004","is_mandatory":true,"title":"Whether the cluster is paused","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"pitEnabled":{"name":"pitEnabled","type":"\u0004","is_mandatory":true,"title":"Whether continuous point-in-time recovery is enabled","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"redactClientLogData":{"name":"redactClientLogData","type":"\u0004","is_mandatory":true,"title":"Whether client log data is redacted","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"regionConfigs":{"name":"regionConfigs","type":"\u0019\n","is_mandatory":true,"title":"Per-region configuration, each with providerName, regionName, instanceSize, nodeCount, diskSizeGB, and priority","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"rootCertType":{"name":"rootCertType","type":"\u0007","is_mandatory":true,"title":"Root CA certificate type","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"stateName":{"name":"stateName","type":"\u0007","is_mandatory":true,"title":"Current state (such as IDLE or CREATING)","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"terminationProtectionEnabled":{"name":"terminationProtectionEnabled","type":"\u0004","is_mandatory":true,"title":"Whether termination protection is enabled","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"tlsCipherConfigMode":{"name":"tlsCipherConfigMode","type":"\u0007","is_mandatory":true,"title":"TLS cipher configuration mode (DEFAULT or CUSTOM)","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"versionReleaseSystem":{"name":"versionReleaseSystem","type":"\u0007","is_mandatory":true,"title":"Version release track (LTS or CONTINUOUS)","provider":"go.mondoo.com/mql/providers/mongodbatlas"}},"title":"MongoDB Atlas cluster","desc":"A database cluster (deployment) in the project, keyed by name. Covers the MongoDB version and release track, cluster topology, backup and point-in-time-recovery state, encryption-at-rest provider, the minimum enabled TLS protocol, client-log redaction, termination protection, and the per-region provider and instance sizing. Select a cluster by name, for example `mongodbatlas.clusters.where(name == \"prod-0\")`.","min_provider_version":"13.0.0","defaults":"name mongoDBMajorVersion encryptionAtRestProvider","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"mongodbatlas.databaseUser":{"id":"mongodbatlas.databaseUser","name":"mongodbatlas.databaseUser","fields":{"awsIAMType":{"name":"awsIAMType","type":"\u0007","is_mandatory":true,"title":"AWS IAM authentication type (NONE, USER, or ROLE)","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"databaseName":{"name":"databaseName","type":"\u0007","is_mandatory":true,"title":"Authentication database (admin for SCRAM, $external for X.509/IAM/LDAP/OIDC)","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"deleteAfterDate":{"name":"deleteAfterDate","type":"\t","is_mandatory":true,"title":"Time after which the user is automatically deleted, null when permanent","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Description of the user","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Composite id (authentication database and username)","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"ldapAuthType":{"name":"ldapAuthType","type":"\u0007","is_mandatory":true,"title":"LDAP authentication type (NONE, USER, or GROUP)","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"oidcAuthType":{"name":"oidcAuthType","type":"\u0007","is_mandatory":true,"title":"OIDC authentication type (NONE, IDP_GROUP, or USER)","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"roles":{"name":"roles","type":"\u0019\n","is_mandatory":true,"title":"Roles granted to the user, each with roleName, databaseName, and optional collectionName","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"scopes":{"name":"scopes","type":"\u0019\n","is_mandatory":true,"title":"Scopes limiting the clusters or data lakes the user may access, each with name and type","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"username":{"name":"username","type":"\u0007","is_mandatory":true,"title":"Username","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"x509Type":{"name":"x509Type","type":"\u0007","is_mandatory":true,"title":"X.509 authentication type (NONE, MANAGED, or CUSTOMER)","provider":"go.mondoo.com/mql/providers/mongodbatlas"}},"title":"MongoDB Atlas database user","desc":"A database user in the project, keyed by the username and authentication database. Covers the authentication mechanism (SCRAM, X.509, AWS IAM, LDAP, or OIDC), the granted roles, the scopes limiting which clusters the user may access, and any automatic deletion time. The password is never exposed. Select a user by username, for example `mongodbatlas.databaseUsers.where(username == \"app\")`.","min_provider_version":"13.0.0","defaults":"username databaseName","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"mongodbatlas.encryptionConfig":{"id":"mongodbatlas.encryptionConfig","name":"mongodbatlas.encryptionConfig","fields":{"awsKmsEnabled":{"name":"awsKmsEnabled","type":"\u0004","is_mandatory":true,"title":"Whether AWS KMS customer-key encryption at rest is enabled","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"awsKmsValid":{"name":"awsKmsValid","type":"\u0004","is_mandatory":true,"title":"Whether the AWS KMS configuration is valid","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"azureKeyVaultEnabled":{"name":"azureKeyVaultEnabled","type":"\u0004","is_mandatory":true,"title":"Whether Azure Key Vault customer-key encryption at rest is enabled","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"azureKeyVaultValid":{"name":"azureKeyVaultValid","type":"\u0004","is_mandatory":true,"title":"Whether the Azure Key Vault configuration is valid","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"enabledForSearchNodes":{"name":"enabledForSearchNodes","type":"\u0004","is_mandatory":true,"title":"Whether encryption at rest is enabled for search nodes","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"googleCloudKmsEnabled":{"name":"googleCloudKmsEnabled","type":"\u0004","is_mandatory":true,"title":"Whether Google Cloud KMS customer-key encryption at rest is enabled","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"googleCloudKmsValid":{"name":"googleCloudKmsValid","type":"\u0004","is_mandatory":true,"title":"Whether the Google Cloud KMS configuration is valid","provider":"go.mondoo.com/mql/providers/mongodbatlas"}},"title":"MongoDB Atlas encryption-at-rest configuration","desc":"The customer-managed encryption-at-rest settings for the project. Covers whether encryption at rest with a customer key is enabled for each cloud provider (AWS KMS, Azure Key Vault, Google Cloud KMS) and for search nodes. Key material is never exposed.","min_provider_version":"13.0.0","defaults":"awsKmsEnabled azureKeyVaultEnabled googleCloudKmsEnabled","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"mongodbatlas.networkAccessEntry":{"id":"mongodbatlas.networkAccessEntry","name":"mongodbatlas.networkAccessEntry","fields":{"awsSecurityGroup":{"name":"awsSecurityGroup","type":"\u0007","is_mandatory":true,"title":"AWS security group granted access","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"cidrBlock":{"name":"cidrBlock","type":"\u0007","is_mandatory":true,"title":"CIDR block granted access","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"comment":{"name":"comment","type":"\u0007","is_mandatory":true,"title":"Comment describing the entry","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"deleteAfterDate":{"name":"deleteAfterDate","type":"\t","is_mandatory":true,"title":"Time after which the entry is automatically removed, null when permanent","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"ipAddress":{"name":"ipAddress","type":"\u0007","is_mandatory":true,"title":"Single IP address granted access","provider":"go.mondoo.com/mql/providers/mongodbatlas"}},"title":"MongoDB Atlas project IP access list entry","desc":"A single entry in the project's IP access list, keyed by its CIDR block or IP address. Only clients matching an entry may reach the project's clusters. Covers the CIDR block or address, an optional AWS security group, and any automatic expiry. Select an entry by value, for example `mongodbatlas.ipAccessList.where(cidrBlock == \"10.0.0.0/24\")`.","min_provider_version":"13.0.0","defaults":"cidrBlock ipAddress comment","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"mongodbatlas.networkPeering":{"id":"mongodbatlas.networkPeering","name":"mongodbatlas.networkPeering","fields":{"awsAccountId":{"name":"awsAccountId","type":"\u0007","is_mandatory":true,"title":"AWS account id of the peered VPC","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"containerId":{"name":"containerId","type":"\u0007","is_mandatory":true,"title":"Id of the Atlas network container","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Peering connection id","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"networkName":{"name":"networkName","type":"\u0007","is_mandatory":true,"title":"Peered GCP network name","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"providerName":{"name":"providerName","type":"\u0007","is_mandatory":true,"title":"Cloud provider (AWS, AZURE, or GCP)","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"routeTableCidrBlock":{"name":"routeTableCidrBlock","type":"\u0007","is_mandatory":true,"title":"CIDR block of the peered route table","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"status":{"name":"status","type":"\u0007","is_mandatory":true,"title":"Status of the peering connection","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"vnetName":{"name":"vnetName","type":"\u0007","is_mandatory":true,"title":"Peered Azure VNet name","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"vpcId":{"name":"vpcId","type":"\u0007","is_mandatory":true,"title":"Peered AWS VPC id","provider":"go.mondoo.com/mql/providers/mongodbatlas"}},"title":"MongoDB Atlas network peering connection","desc":"A VPC or VNet peering connection between the project's Atlas network and a customer network, keyed by id. Covers the cloud provider, the peered network identifiers, and the connection status. Fields vary by provider.","min_provider_version":"13.0.0","defaults":"providerName status","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"mongodbatlas.orgUser":{"id":"mongodbatlas.orgUser","name":"mongodbatlas.orgUser","fields":{"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"User id","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"lastAuth":{"name":"lastAuth","type":"\t","is_mandatory":true,"title":"Time the member last authenticated","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"orgMembershipStatus":{"name":"orgMembershipStatus","type":"\u0007","is_mandatory":true,"title":"Membership status (ACTIVE or PENDING)","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"orgRoles":{"name":"orgRoles","type":"\u0019\u0007","is_mandatory":true,"title":"Organization-level roles granted to the member","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"teamIds":{"name":"teamIds","type":"\u0019\u0007","is_mandatory":true,"title":"Ids of the teams the member belongs to","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"teams":{"name":"teams","type":"\u0019\u001bmongodbatlas.team","title":"Teams the member belongs to","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"username":{"name":"username","type":"\u0007","is_mandatory":true,"title":"Login name (email)","provider":"go.mondoo.com/mql/providers/mongodbatlas"}},"title":"MongoDB Atlas organization member","desc":"A user account that is a member of the organization, keyed by username (the login email). Covers the membership status, the organization-level roles, per-project role assignments, team memberships, and the last authentication time. Select a member by username, for example `mongodbatlas.orgUsers.where(username == \"alice@example.com\")`.","min_provider_version":"13.0.0","defaults":"username orgMembershipStatus","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"mongodbatlas.privateEndpointService":{"id":"mongodbatlas.privateEndpointService","name":"mongodbatlas.privateEndpointService","fields":{"cloudProvider":{"name":"cloudProvider","type":"\u0007","is_mandatory":true,"title":"Cloud provider (AWS, AZURE, or GCP)","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"errorMessage":{"name":"errorMessage","type":"\u0007","is_mandatory":true,"title":"Error message when the endpoint service is in an error state","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Endpoint service id","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"interfaceEndpoints":{"name":"interfaceEndpoints","type":"\u0019\u0007","is_mandatory":true,"title":"Interface endpoint ids attached to the service","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"regionName":{"name":"regionName","type":"\u0007","is_mandatory":true,"title":"Region the endpoint service is in","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"status":{"name":"status","type":"\u0007","is_mandatory":true,"title":"Status of the endpoint service","provider":"go.mondoo.com/mql/providers/mongodbatlas"}},"title":"MongoDB Atlas private endpoint service","desc":"A private endpoint service configured for the project on a single cloud provider, keyed by id. Private endpoints let clients reach clusters over the cloud provider's private network instead of the public internet. Covers the cloud provider, region, status, and the underlying endpoint identifiers.","min_provider_version":"13.0.0","defaults":"cloudProvider regionName status","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"mongodbatlas.project":{"id":"mongodbatlas.project","name":"mongodbatlas.project","fields":{"clusterCount":{"name":"clusterCount","type":"\u0005","is_mandatory":true,"title":"Number of clusters in the project","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"created":{"name":"created","type":"\t","is_mandatory":true,"title":"Time the project was created","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Project id","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Project name","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"orgId":{"name":"orgId","type":"\u0007","is_mandatory":true,"title":"Id of the organization that owns the project","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"regionUsageRestrictions":{"name":"regionUsageRestrictions","type":"\u0007","is_mandatory":true,"title":"Government region restriction (Atlas for Government), empty for commercial projects","provider":"go.mondoo.com/mql/providers/mongodbatlas"}},"title":"MongoDB Atlas project","desc":"A project (also called a group) in the organization, keyed by id. Covers the owning organization, the number of clusters, the creation time, and any government region restrictions. Select a project by name, for example `mongodbatlas.projects.where(name == \"production\")`.","min_provider_version":"13.0.0","defaults":"name id orgId","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"mongodbatlas.projectConfig":{"id":"mongodbatlas.projectConfig","name":"mongodbatlas.projectConfig","fields":{"isCollectDatabaseSpecificsStatisticsEnabled":{"name":"isCollectDatabaseSpecificsStatisticsEnabled","type":"\u0004","is_mandatory":true,"title":"Whether collection of database-specific statistics is enabled","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"isDataExplorerEnabled":{"name":"isDataExplorerEnabled","type":"\u0004","is_mandatory":true,"title":"Whether the Data Explorer (in-console data browsing) is enabled","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"isDataExplorerGenAIFeaturesEnabled":{"name":"isDataExplorerGenAIFeaturesEnabled","type":"\u0004","is_mandatory":true,"title":"Whether Data Explorer generative AI features are enabled","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"isExtendedStorageSizesEnabled":{"name":"isExtendedStorageSizesEnabled","type":"\u0004","is_mandatory":true,"title":"Whether extended storage sizes are enabled","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"isPerformanceAdvisorEnabled":{"name":"isPerformanceAdvisorEnabled","type":"\u0004","is_mandatory":true,"title":"Whether the Performance Advisor is enabled","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"isRealtimePerformancePanelEnabled":{"name":"isRealtimePerformancePanelEnabled","type":"\u0004","is_mandatory":true,"title":"Whether the real-time performance panel is enabled","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"isSchemaAdvisorEnabled":{"name":"isSchemaAdvisorEnabled","type":"\u0004","is_mandatory":true,"title":"Whether the Schema Advisor is enabled","provider":"go.mondoo.com/mql/providers/mongodbatlas"}},"title":"MongoDB Atlas project feature settings","desc":"Feature toggles for the project, such as whether the Data Explorer and its generative AI features are enabled and whether the performance and schema advisors are active. These govern which in-console data-access and analysis features are exposed.","min_provider_version":"13.0.0","defaults":"isDataExplorerEnabled","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"mongodbatlas.serviceAccount":{"id":"mongodbatlas.serviceAccount","name":"mongodbatlas.serviceAccount","fields":{"clientId":{"name":"clientId","type":"\u0007","is_mandatory":true,"title":"OAuth client id","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"title":"Time the service account was created","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Description of the service account","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Service account name","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"roles":{"name":"roles","type":"\u0019\u0007","is_mandatory":true,"title":"Organization roles granted to the service account","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"secrets":{"name":"secrets","type":"\u0019\n","is_mandatory":true,"title":"Issued secrets, each with its id, creation, expiry, and last-used times (no secret values)","provider":"go.mondoo.com/mql/providers/mongodbatlas"}},"title":"MongoDB Atlas service account","desc":"A service account in the organization, keyed by its client id. Covers the granted organization roles and the secrets issued to it (their ids and expiry times, never the secret values). Select an account by client id, for example `mongodbatlas.serviceAccounts.where(name == \"automation\")`.","min_provider_version":"13.0.0","defaults":"name clientId","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"mongodbatlas.team":{"id":"mongodbatlas.team","name":"mongodbatlas.team","fields":{"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Team id","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Team name","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"users":{"name":"users","type":"\u0019\u001bmongodbatlas.orgUser","title":"Members of the team","provider":"go.mondoo.com/mql/providers/mongodbatlas"}},"title":"MongoDB Atlas team","desc":"A team in the organization, keyed by name. Teams group members for role assignment on projects. Select a team by name, for example `mongodbatlas.teams.where(name == \"platform\")`.","min_provider_version":"13.0.0","defaults":"name id","provider":"go.mondoo.com/mql/providers/mongodbatlas"}}}