{"resources":{"mongodbatlas":{"id":"mongodbatlas","name":"mongodbatlas","fields":{"apiAccessListRequired":{"name":"apiAccessListRequired","type":"\u0004","title":"Whether an API access list is required for organization API keys and service accounts","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"apiKey":{"name":"apiKey","type":"\u001bmongodbatlas.apiKey","title":"MongoDB Atlas programmatic API key","desc":"A programmatic API key in the organization, keyed by its public key. Covers the description and the roles the key is granted at the organization and project level. The private key is never exposed. Select a key by public key, for example `mongodbatlas.apiKeys.where(description == \"ci\")`.","provider":"go.mondoo.com/mql/providers/mongodbatlas","is_implicit_resource":true},"apiKeys":{"name":"apiKeys","type":"\u0019\u001bmongodbatlas.apiKey","title":"Programmatic API keys in the organization","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"auditConfig":{"name":"auditConfig","type":"\u001bmongodbatlas.auditConfig","title":"MongoDB Atlas database auditing configuration","desc":"The database auditing settings for the project. Covers whether auditing is enabled, whether authorization successes are audited (not just failures), the audit filter, and how the filter was configured.","provider":"go.mondoo.com/mql/providers/mongodbatlas","is_implicit_resource":true},"auditing":{"name":"auditing","type":"\u001bmongodbatlas.auditConfig","title":"Database auditing configuration for the project","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"backupComplianceConfig":{"name":"backupComplianceConfig","type":"\u001bmongodbatlas.backupComplianceConfig","title":"MongoDB Atlas Backup Compliance Policy","desc":"The Backup Compliance Policy for the project, the anti-ransomware immutability guardrail that prevents backups from being modified or deleted before their retention period expires. Covers whether copy protection and encryption at rest are enforced, whether point-in-time recovery is required, the restore window, the authorized security contact, the enablement state, and the on-demand and scheduled retention policy items. Present only when a Backup Compliance Policy has been configured, and null otherwise.","provider":"go.mondoo.com/mql/providers/mongodbatlas","is_implicit_resource":true},"backupCompliancePolicy":{"name":"backupCompliancePolicy","type":"\u001bmongodbatlas.backupComplianceConfig","title":"Backup Compliance Policy for the project","min_provider_version":"13.0.1","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"cloudProviderAccessRole":{"name":"cloudProviderAccessRole","type":"\u001bmongodbatlas.cloudProviderAccessRole","title":"MongoDB Atlas cloud provider access role","desc":"A cloud provider identity (an AWS IAM role, Azure service principal, or GCP service account) that Atlas assumes to access customer cloud resources such as customer-managed encryption keys, keyed by roleId. Covers the provider, the assumed identity, and when it was authorized.","provider":"go.mondoo.com/mql/providers/mongodbatlas","is_implicit_resource":true},"cloudProviderAccessRoles":{"name":"cloudProviderAccessRoles","type":"\u0019\u001bmongodbatlas.cloudProviderAccessRole","title":"Cloud provider access roles configured for the project","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"cluster":{"name":"cluster","type":"\u001bmongodbatlas.cluster","title":"MongoDB Atlas cluster","desc":"A database cluster (deployment) in the project, keyed by name. Covers the MongoDB version and release track, cluster topology, backup and point-in-time-recovery state, encryption-at-rest provider, the minimum enabled TLS protocol, client-log redaction, termination protection, and the per-region provider and instance sizing. Select a cluster by name, for example `mongodbatlas.clusters.where(name == \"prod-0\")`.","provider":"go.mondoo.com/mql/providers/mongodbatlas","is_implicit_resource":true},"clusters":{"name":"clusters","type":"\u0019\u001bmongodbatlas.cluster","title":"Clusters in the project","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"customDatabaseRole":{"name":"customDatabaseRole","type":"\u001bmongodbatlas.customDatabaseRole","title":"MongoDB Atlas custom database role","desc":"A user-defined database role in the project, keyed by role name. Covers the individual privilege actions the role grants (each with the cluster, database, and collection resources it applies to) and the built-in or custom roles it inherits. Auditing custom roles surfaces over-privileged or privilege-escalating grants beyond the built-in roles. Select a role by name, for example `mongodbatlas.customDatabaseRoles.where(roleName == \"appReadWrite\")`.","provider":"go.mondoo.com/mql/providers/mongodbatlas","is_implicit_resource":true},"customDatabaseRoles":{"name":"customDatabaseRoles","type":"\u0019\u001bmongodbatlas.customDatabaseRole","title":"Custom database roles defined in the project","min_provider_version":"13.0.1","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"databaseUser":{"name":"databaseUser","type":"\u001bmongodbatlas.databaseUser","title":"MongoDB Atlas database user","desc":"A database user in the project, keyed by the username and authentication database. Covers the authentication mechanism (SCRAM, X.509, AWS IAM, LDAP, or OIDC), the granted roles, the scopes limiting which clusters the user may access, and any automatic deletion time. The password is never exposed. Select a user by username, for example `mongodbatlas.databaseUsers.where(username == \"app\")`.","provider":"go.mondoo.com/mql/providers/mongodbatlas","is_implicit_resource":true},"databaseUsers":{"name":"databaseUsers","type":"\u0019\u001bmongodbatlas.databaseUser","title":"Database users in the project","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"encryptionAtRest":{"name":"encryptionAtRest","type":"\u001bmongodbatlas.encryptionConfig","title":"Encryption-at-rest configuration for the project","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"encryptionConfig":{"name":"encryptionConfig","type":"\u001bmongodbatlas.encryptionConfig","title":"MongoDB Atlas encryption-at-rest configuration","desc":"The customer-managed encryption-at-rest settings for the project. Covers whether encryption at rest with a customer key is enabled for each cloud provider (AWS KMS, Azure Key Vault, Google Cloud KMS) and for search nodes. Key material is never exposed.","provider":"go.mondoo.com/mql/providers/mongodbatlas","is_implicit_resource":true},"federationConfig":{"name":"federationConfig","type":"\u001bmongodbatlas.federationConfig","title":"MongoDB Atlas identity federation settings","desc":"Organization-level identity federation configuration. Covers the connected identity provider and its status, whether role mappings are configured, the domains the organization has federated, and the identity providers linked to the federation. Present only when the organization has federation configured, and null otherwise.","provider":"go.mondoo.com/mql/providers/mongodbatlas","is_implicit_resource":true},"federationSettings":{"name":"federationSettings","type":"\u001bmongodbatlas.federationConfig","title":"Identity federation settings for the organization","min_provider_version":"13.0.1","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"genAiFeaturesEnabled":{"name":"genAiFeaturesEnabled","type":"\u0004","title":"Whether generative AI features are enabled for the organization","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"identityProvider":{"name":"identityProvider","type":"\u001bmongodbatlas.identityProvider","title":"MongoDB Atlas identity provider","desc":"A SAML or OIDC identity provider linked to the organization's federation, keyed by id. Covers the protocol and provider type, the activation status, the issuer and associated domains, and the protocol-specific settings that matter for sign-in security (SAML request binding, response signature algorithm, and SSO debug mode; OIDC authorization type, client id, and requested scopes). Read providers from the federation settings, for example `mongodbatlas.federationConfig.identityProviders.where(ssoDebugEnabled == true)`.","provider":"go.mondoo.com/mql/providers/mongodbatlas","is_implicit_resource":true},"ipAccessList":{"name":"ipAccessList","type":"\u0019\u001bmongodbatlas.networkAccessEntry","title":"Project IP access list entries","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"maxServiceAccountSecretValidityInHours":{"name":"maxServiceAccountSecretValidityInHours","type":"\u0005","title":"Maximum validity in hours for service account secrets, 0 when unlimited","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"multiFactorAuthRequired":{"name":"multiFactorAuthRequired","type":"\u0004","title":"Whether multi-factor authentication is required for all organization members","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"networkAccessEntry":{"name":"networkAccessEntry","type":"\u001bmongodbatlas.networkAccessEntry","title":"MongoDB Atlas project IP access list entry","desc":"A single entry in the project's IP access list, keyed by its CIDR block or IP address. Only clients matching an entry may reach the project's clusters. Covers the CIDR block or address, an optional AWS security group, and any automatic expiry. Select an entry by value, for example `mongodbatlas.ipAccessList.where(cidrBlock == \"10.0.0.0/24\")`.","provider":"go.mondoo.com/mql/providers/mongodbatlas","is_implicit_resource":true},"networkPeering":{"name":"networkPeering","type":"\u001bmongodbatlas.networkPeering","title":"MongoDB Atlas network peering connection","desc":"A VPC or VNet peering connection between the project's Atlas network and a customer network, keyed by id. Covers the cloud provider, the peered network identifiers, and the connection status. Fields vary by provider.","provider":"go.mondoo.com/mql/providers/mongodbatlas","is_implicit_resource":true},"networkPeerings":{"name":"networkPeerings","type":"\u0019\u001bmongodbatlas.networkPeering","title":"Network peering connections for the project","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"orgUser":{"name":"orgUser","type":"\u001bmongodbatlas.orgUser","title":"MongoDB Atlas organization member","desc":"A user account that is a member of the organization, keyed by username (the login email). Covers the membership status, the organization-level roles, per-project role assignments, team memberships, and the last authentication time. Select a member by username, for example `mongodbatlas.orgUsers.where(username == \"alice@example.com\")`.","provider":"go.mondoo.com/mql/providers/mongodbatlas","is_implicit_resource":true},"orgUsers":{"name":"orgUsers","type":"\u0019\u001bmongodbatlas.orgUser","title":"Organization members","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"organizationId":{"name":"organizationId","type":"\u0007","title":"Organization id","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"organizationName":{"name":"organizationName","type":"\u0007","title":"Organization name","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"privateEndpointService":{"name":"privateEndpointService","type":"\u001bmongodbatlas.privateEndpointService","title":"MongoDB Atlas private endpoint service","desc":"A private endpoint service configured for the project on a single cloud provider, keyed by id. Private endpoints let clients reach clusters over the cloud provider's private network instead of the public internet. Covers the cloud provider, region, status, and the underlying endpoint identifiers.","provider":"go.mondoo.com/mql/providers/mongodbatlas","is_implicit_resource":true},"privateEndpoints":{"name":"privateEndpoints","type":"\u0019\u001bmongodbatlas.privateEndpointService","title":"Private endpoint services configured for the project","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"project":{"name":"project","type":"\u001bmongodbatlas.project","title":"MongoDB Atlas project","desc":"A project (also called a group) in the organization, keyed by id. Covers the owning organization, the number of clusters, the creation time, and any government region restrictions. Select a project by name, for example `mongodbatlas.projects.where(name == \"production\")`.","provider":"go.mondoo.com/mql/providers/mongodbatlas","is_implicit_resource":true},"projectConfig":{"name":"projectConfig","type":"\u001bmongodbatlas.projectConfig","title":"MongoDB Atlas project feature settings","desc":"Feature toggles for the project, such as whether the Data Explorer and its generative AI features are enabled and whether the performance and schema advisors are active. These govern which in-console data-access and analysis features are exposed.","provider":"go.mondoo.com/mql/providers/mongodbatlas","is_implicit_resource":true},"projectSettings":{"name":"projectSettings","type":"\u001bmongodbatlas.projectConfig","title":"Project feature settings","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"projects":{"name":"projects","type":"\u0019\u001bmongodbatlas.project","title":"Projects in the organization","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"pushBasedLogConfig":{"name":"pushBasedLogConfig","type":"\u001bmongodbatlas.pushBasedLogConfig","title":"MongoDB Atlas push-based log export configuration","desc":"The push-based log export configuration for the project, which delivers database audit and access logs to a customer-owned AWS S3 bucket. Covers the destination bucket, the AWS IAM role Atlas assumes to write to it, the object key prefix, and the configuration state. Present only when push-based log export has been configured, and null otherwise.","provider":"go.mondoo.com/mql/providers/mongodbatlas","is_implicit_resource":true},"pushBasedLogExport":{"name":"pushBasedLogExport","type":"\u001bmongodbatlas.pushBasedLogConfig","title":"Push-based log export configuration for the project","min_provider_version":"13.0.1","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"resourcePolicies":{"name":"resourcePolicies","type":"\u0019\u001bmongodbatlas.resourcePolicy","title":"Organization resource policies (Atlas Resource Policies)","min_provider_version":"13.0.1","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"resourcePolicy":{"name":"resourcePolicy","type":"\u001bmongodbatlas.resourcePolicy","title":"MongoDB Atlas resource policy","desc":"An organization-level Atlas Resource Policy, keyed by id. Resource policies are Cedar-based guardrails that constrain what actions can be taken on Atlas resources across the organization (for example restricting the cloud providers or regions clusters may deploy to). Covers the name, description, the users and times of creation and last update, and the individual policy statements. Select a policy by name, for example `mongodbatlas.resourcePolicies.where(name == \"restrict-regions\")`.","provider":"go.mondoo.com/mql/providers/mongodbatlas","is_implicit_resource":true},"restrictEmployeeAccess":{"name":"restrictEmployeeAccess","type":"\u0004","title":"Whether MongoDB support employee access to organization infrastructure is restricted","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"searchIndex":{"name":"searchIndex","type":"\u001bmongodbatlas.searchIndex","title":"MongoDB Atlas search or vector search index","desc":"A single Atlas Search or Atlas Vector Search index defined on a cluster, covering both index kinds through the type discriminator: \"search\" for a full-text Atlas Search index and \"vectorSearch\" for an Atlas Vector Search index. Reports the database and collection the index is built on, its build status and whether it is currently queryable, and the full index definition. The latestDefinition field carries the index configuration: for vector search the vector and filter fields with their numDimensions, similarity function, and path, plus numPartitions; for full-text search the analyzer, analyzers, mappings, searchAnalyzer, synonyms, and the storedSource clause that governs which document fields are copied into the index.","provider":"go.mondoo.com/mql/providers/mongodbatlas","is_implicit_resource":true},"securityContact":{"name":"securityContact","type":"\u0007","title":"Email address that receives security notifications for the organization","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"serviceAccount":{"name":"serviceAccount","type":"\u001bmongodbatlas.serviceAccount","title":"MongoDB Atlas service account","desc":"A service account in the organization, keyed by its client id. Covers the granted organization roles and the secrets issued to it (their ids and expiry times, never the secret values). Select an account by client id, for example `mongodbatlas.serviceAccounts.where(name == \"automation\")`.","provider":"go.mondoo.com/mql/providers/mongodbatlas","is_implicit_resource":true},"serviceAccounts":{"name":"serviceAccounts","type":"\u0019\u001bmongodbatlas.serviceAccount","title":"Service accounts in the organization","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"team":{"name":"team","type":"\u001bmongodbatlas.team","title":"MongoDB Atlas team","desc":"A team in the organization, keyed by name. Teams group members for role assignment on projects. Select a team by name, for example `mongodbatlas.teams.where(name == \"platform\")`.","provider":"go.mondoo.com/mql/providers/mongodbatlas","is_implicit_resource":true},"teams":{"name":"teams","type":"\u0019\u001bmongodbatlas.team","title":"Teams in the organization","provider":"go.mondoo.com/mql/providers/mongodbatlas"}},"title":"MongoDB Atlas","desc":"Entry point to a MongoDB Atlas organization and its projects. Connecting to an organization exposes organization-wide security settings and identity through the organizationName, multiFactorAuthRequired, apiAccessListRequired, restrictEmployeeAccess, orgUsers, teams, apiKeys, serviceAccounts, resourcePolicies, and federationSettings fields, and enumerates every project through the projects field. Connecting to a single project exposes that project's security surface through the clusters, databaseUsers, customDatabaseRoles, ipAccessList, projectSettings, auditing, encryptionAtRest, backupCompliancePolicy, pushBasedLogExport, privateEndpoints, networkPeerings, and cloudProviderAccessRoles fields.","min_provider_version":"13.0.0","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"mongodbatlas.apiKey":{"id":"mongodbatlas.apiKey","name":"mongodbatlas.apiKey","fields":{"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Description of the key","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"API key id","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"publicKey":{"name":"publicKey","type":"\u0007","is_mandatory":true,"title":"Public key (the non-secret half of the key pair)","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"roleAssignment":{"name":"roleAssignment","type":"\u001bmongodbatlas.apiKey.roleAssignment","title":"MongoDB Atlas API key role assignment","desc":"A single role granted to a programmatic API key, either at the organization level or scoped to one project. Covers the role name, whether the grant is organization-level, and the project a project-scoped grant applies to.","is_private":true,"provider":"go.mondoo.com/mql/providers/mongodbatlas","is_implicit_resource":true},"roleAssignments":{"name":"roleAssignments","type":"\u0019\u001bmongodbatlas.apiKey.roleAssignment","title":"Role assignments granted to the key at the organization or project level","min_provider_version":"13.0.1","provider":"go.mondoo.com/mql/providers/mongodbatlas"}},"title":"MongoDB Atlas programmatic API key","desc":"A programmatic API key in the organization, keyed by its public key. Covers the description and the roles the key is granted at the organization and project level. The private key is never exposed. Select a key by public key, for example `mongodbatlas.apiKeys.where(description == \"ci\")`.","min_provider_version":"13.0.0","defaults":"publicKey description","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"mongodbatlas.apiKey.roleAssignment":{"id":"mongodbatlas.apiKey.roleAssignment","name":"mongodbatlas.apiKey.roleAssignment","fields":{"orgLevel":{"name":"orgLevel","type":"\u0004","is_mandatory":true,"title":"Whether the role is granted at the organization level rather than a project","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"project":{"name":"project","type":"\u001bmongodbatlas.project","title":"Project the role applies to, null for an organization-level role","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"roleName":{"name":"roleName","type":"\u0007","is_mandatory":true,"title":"Role granted (such as ORG_OWNER or GROUP_READ_ONLY)","provider":"go.mondoo.com/mql/providers/mongodbatlas"}},"title":"MongoDB Atlas API key role assignment","desc":"A single role granted to a programmatic API key, either at the organization level or scoped to one project. Covers the role name, whether the grant is organization-level, and the project a project-scoped grant applies to.","private":true,"min_provider_version":"13.0.1","defaults":"roleName","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"mongodbatlas.auditConfig":{"id":"mongodbatlas.auditConfig","name":"mongodbatlas.auditConfig","fields":{"auditAuthorizationSuccess":{"name":"auditAuthorizationSuccess","type":"\u0004","is_mandatory":true,"title":"Whether successful authorization events are audited in addition to failures","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"auditFilter":{"name":"auditFilter","type":"\u0007","is_mandatory":true,"title":"JSON audit filter selecting which events are recorded","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"configurationType":{"name":"configurationType","type":"\u0007","is_mandatory":true,"title":"How the audit filter was configured (NONE, FILTER_BUILDER, or FILTER_JSON)","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"enabled":{"name":"enabled","type":"\u0004","is_mandatory":true,"title":"Whether database auditing is enabled","provider":"go.mondoo.com/mql/providers/mongodbatlas"}},"title":"MongoDB Atlas database auditing configuration","desc":"The database auditing settings for the project. Covers whether auditing is enabled, whether authorization successes are audited (not just failures), the audit filter, and how the filter was configured.","min_provider_version":"13.0.0","defaults":"enabled auditAuthorizationSuccess","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"mongodbatlas.backupComplianceConfig":{"id":"mongodbatlas.backupComplianceConfig","name":"mongodbatlas.backupComplianceConfig","fields":{"authorizedEmail":{"name":"authorizedEmail","type":"\u0007","is_mandatory":true,"title":"Email address of the security contact authorized to change the policy","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"copyProtectionEnabled":{"name":"copyProtectionEnabled","type":"\u0004","is_mandatory":true,"title":"Whether snapshots are prevented from being copied to other projects","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"encryptionAtRestEnabled":{"name":"encryptionAtRestEnabled","type":"\u0004","is_mandatory":true,"title":"Whether encryption at rest is required for backups","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"onDemandPolicyItem":{"name":"onDemandPolicyItem","type":"\n","is_mandatory":true,"title":"On-demand backup retention rule, with frequencyType, retentionUnit, and retentionValue","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"pitEnabled":{"name":"pitEnabled","type":"\u0004","is_mandatory":true,"title":"Whether continuous point-in-time recovery is required","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"restoreWindowDays":{"name":"restoreWindowDays","type":"\u0005","is_mandatory":true,"title":"Minimum number of days backups are retained for point-in-time restore","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"scheduledPolicyItems":{"name":"scheduledPolicyItems","type":"\u0019\n","is_mandatory":true,"title":"Scheduled backup retention rules, each with frequencyType, frequencyInterval, retentionUnit, and retentionValue","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"state":{"name":"state","type":"\u0007","is_mandatory":true,"title":"Enablement state of the Backup Compliance Policy (such as ACTIVE)","provider":"go.mondoo.com/mql/providers/mongodbatlas"}},"title":"MongoDB Atlas Backup Compliance Policy","desc":"The Backup Compliance Policy for the project, the anti-ransomware immutability guardrail that prevents backups from being modified or deleted before their retention period expires. Covers whether copy protection and encryption at rest are enforced, whether point-in-time recovery is required, the restore window, the authorized security contact, the enablement state, and the on-demand and scheduled retention policy items. Present only when a Backup Compliance Policy has been configured, and null otherwise.","min_provider_version":"13.0.1","defaults":"state pitEnabled copyProtectionEnabled","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"mongodbatlas.cloudProviderAccessRole":{"id":"mongodbatlas.cloudProviderAccessRole","name":"mongodbatlas.cloudProviderAccessRole","fields":{"atlasAWSAccountArn":{"name":"atlasAWSAccountArn","type":"\u0007","is_mandatory":true,"title":"ARN of the Atlas AWS account authorized to assume the role","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"authorizedDate":{"name":"authorizedDate","type":"\t","is_mandatory":true,"title":"Time the role was authorized, null when not yet authorized","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"azureAtlasAppId":{"name":"azureAtlasAppId","type":"\u0007","is_mandatory":true,"title":"Azure service principal application id","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"azureTenantId":{"name":"azureTenantId","type":"\u0007","is_mandatory":true,"title":"Azure tenant id","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"gcpServiceAccount":{"name":"gcpServiceAccount","type":"\u0007","is_mandatory":true,"title":"GCP service account email Atlas uses","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"iamAssumedRoleArn":{"name":"iamAssumedRoleArn","type":"\u0007","is_mandatory":true,"title":"ARN of the AWS IAM role Atlas assumes","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Role id","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"providerName":{"name":"providerName","type":"\u0007","is_mandatory":true,"title":"Cloud provider (AWS, AZURE, or GCP)","provider":"go.mondoo.com/mql/providers/mongodbatlas"}},"title":"MongoDB Atlas cloud provider access role","desc":"A cloud provider identity (an AWS IAM role, Azure service principal, or GCP service account) that Atlas assumes to access customer cloud resources such as customer-managed encryption keys, keyed by roleId. Covers the provider, the assumed identity, and when it was authorized.","min_provider_version":"13.0.0","defaults":"providerName iamAssumedRoleArn","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"mongodbatlas.cluster":{"id":"mongodbatlas.cluster","name":"mongodbatlas.cluster","fields":{"backupEnabled":{"name":"backupEnabled","type":"\u0004","is_mandatory":true,"title":"Whether cloud backup is enabled","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"clusterType":{"name":"clusterType","type":"\u0007","is_mandatory":true,"title":"Cluster topology (REPLICASET, SHARDED, or GEOSHARDED)","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"createDate":{"name":"createDate","type":"\t","is_mandatory":true,"title":"Time the cluster was created","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"encryptionAtRestProvider":{"name":"encryptionAtRestProvider","type":"\u0007","is_mandatory":true,"title":"Encryption-at-rest provider (NONE, AWS, AZURE, or GCP)","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Cluster id","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"minimumEnabledTlsProtocol":{"name":"minimumEnabledTlsProtocol","type":"\u0007","is_mandatory":true,"title":"Minimum enabled TLS protocol (such as TLS1_2)","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"mongoDBMajorVersion":{"name":"mongoDBMajorVersion","type":"\u0007","is_mandatory":true,"title":"Configured MongoDB major version","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"mongoDBVersion":{"name":"mongoDBVersion","type":"\u0007","is_mandatory":true,"title":"Running MongoDB version","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Cluster name","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"paused":{"name":"paused","type":"\u0004","is_mandatory":true,"title":"Whether the cluster is paused","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"pitEnabled":{"name":"pitEnabled","type":"\u0004","is_mandatory":true,"title":"Whether continuous point-in-time recovery is enabled","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"redactClientLogData":{"name":"redactClientLogData","type":"\u0004","is_mandatory":true,"title":"Whether client log data is redacted","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"regionConfigs":{"name":"regionConfigs","type":"\u0019\n","is_mandatory":true,"title":"Per-region configuration, each with providerName, regionName, instanceSize, nodeCount, diskSizeGB, and priority","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"rootCertType":{"name":"rootCertType","type":"\u0007","is_mandatory":true,"title":"Root CA certificate type","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"searchIndexes":{"name":"searchIndexes","type":"\u0019\u001bmongodbatlas.searchIndex","title":"Atlas Search and Atlas Vector Search indexes on the cluster","min_provider_version":"13.0.1","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"stateName":{"name":"stateName","type":"\u0007","is_mandatory":true,"title":"Current state (such as IDLE or CREATING)","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"terminationProtectionEnabled":{"name":"terminationProtectionEnabled","type":"\u0004","is_mandatory":true,"title":"Whether termination protection is enabled","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"tlsCipherConfigMode":{"name":"tlsCipherConfigMode","type":"\u0007","is_mandatory":true,"title":"TLS cipher configuration mode (DEFAULT or CUSTOM)","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"versionReleaseSystem":{"name":"versionReleaseSystem","type":"\u0007","is_mandatory":true,"title":"Version release track (LTS or CONTINUOUS)","provider":"go.mondoo.com/mql/providers/mongodbatlas"}},"title":"MongoDB Atlas cluster","desc":"A database cluster (deployment) in the project, keyed by name. Covers the MongoDB version and release track, cluster topology, backup and point-in-time-recovery state, encryption-at-rest provider, the minimum enabled TLS protocol, client-log redaction, termination protection, and the per-region provider and instance sizing. Select a cluster by name, for example `mongodbatlas.clusters.where(name == \"prod-0\")`.","min_provider_version":"13.0.0","defaults":"name mongoDBMajorVersion encryptionAtRestProvider","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"mongodbatlas.customDatabaseRole":{"id":"mongodbatlas.customDatabaseRole","name":"mongodbatlas.customDatabaseRole","fields":{"actions":{"name":"actions","type":"\u0019\n","is_mandatory":true,"title":"Privilege actions the role grants, each with its action name and the resources (cluster, database, collection) it applies to","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"inheritedRoles":{"name":"inheritedRoles","type":"\u0019\n","is_mandatory":true,"title":"Roles this custom role inherits, each with its role name and database","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"roleName":{"name":"roleName","type":"\u0007","is_mandatory":true,"title":"Role name","provider":"go.mondoo.com/mql/providers/mongodbatlas"}},"title":"MongoDB Atlas custom database role","desc":"A user-defined database role in the project, keyed by role name. Covers the individual privilege actions the role grants (each with the cluster, database, and collection resources it applies to) and the built-in or custom roles it inherits. Auditing custom roles surfaces over-privileged or privilege-escalating grants beyond the built-in roles. Select a role by name, for example `mongodbatlas.customDatabaseRoles.where(roleName == \"appReadWrite\")`.","min_provider_version":"13.0.1","defaults":"roleName","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"mongodbatlas.databaseUser":{"id":"mongodbatlas.databaseUser","name":"mongodbatlas.databaseUser","fields":{"awsIAMType":{"name":"awsIAMType","type":"\u0007","is_mandatory":true,"title":"AWS IAM authentication type (NONE, USER, or ROLE)","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"databaseName":{"name":"databaseName","type":"\u0007","is_mandatory":true,"title":"Authentication database (admin for SCRAM, $external for X.509/IAM/LDAP/OIDC)","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"deleteAfterDate":{"name":"deleteAfterDate","type":"\t","is_mandatory":true,"title":"Time after which the user is automatically deleted, null when permanent","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Description of the user","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Composite id (authentication database and username)","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"ldapAuthType":{"name":"ldapAuthType","type":"\u0007","is_mandatory":true,"title":"LDAP authentication type (NONE, USER, or GROUP)","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"oidcAuthType":{"name":"oidcAuthType","type":"\u0007","is_mandatory":true,"title":"OIDC authentication type (NONE, IDP_GROUP, or USER)","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"roles":{"name":"roles","type":"\u0019\n","is_mandatory":true,"title":"Roles granted to the user, each with roleName, databaseName, and optional collectionName","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"scopedClusters":{"name":"scopedClusters","type":"\u0019\u001bmongodbatlas.cluster","title":"Clusters the user is scoped to, empty when the user may access all clusters in the project","min_provider_version":"13.0.1","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"scopes":{"name":"scopes","type":"\u0019\n","is_mandatory":true,"title":"Scopes limiting the clusters or data lakes the user may access, each with name and type","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"username":{"name":"username","type":"\u0007","is_mandatory":true,"title":"Username","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"x509Type":{"name":"x509Type","type":"\u0007","is_mandatory":true,"title":"X.509 authentication type (NONE, MANAGED, or CUSTOMER)","provider":"go.mondoo.com/mql/providers/mongodbatlas"}},"title":"MongoDB Atlas database user","desc":"A database user in the project, keyed by the username and authentication database. Covers the authentication mechanism (SCRAM, X.509, AWS IAM, LDAP, or OIDC), the granted roles, the scopes limiting which clusters the user may access, and any automatic deletion time. The password is never exposed. Select a user by username, for example `mongodbatlas.databaseUsers.where(username == \"app\")`.","min_provider_version":"13.0.0","defaults":"username databaseName","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"mongodbatlas.encryptionConfig":{"id":"mongodbatlas.encryptionConfig","name":"mongodbatlas.encryptionConfig","fields":{"awsKmsEnabled":{"name":"awsKmsEnabled","type":"\u0004","is_mandatory":true,"title":"Whether AWS KMS customer-key encryption at rest is enabled","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"awsKmsValid":{"name":"awsKmsValid","type":"\u0004","is_mandatory":true,"title":"Whether the AWS KMS configuration is valid","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"azureKeyVaultEnabled":{"name":"azureKeyVaultEnabled","type":"\u0004","is_mandatory":true,"title":"Whether Azure Key Vault customer-key encryption at rest is enabled","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"azureKeyVaultValid":{"name":"azureKeyVaultValid","type":"\u0004","is_mandatory":true,"title":"Whether the Azure Key Vault configuration is valid","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"enabledForSearchNodes":{"name":"enabledForSearchNodes","type":"\u0004","is_mandatory":true,"title":"Whether encryption at rest is enabled for search nodes","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"googleCloudKmsEnabled":{"name":"googleCloudKmsEnabled","type":"\u0004","is_mandatory":true,"title":"Whether Google Cloud KMS customer-key encryption at rest is enabled","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"googleCloudKmsValid":{"name":"googleCloudKmsValid","type":"\u0004","is_mandatory":true,"title":"Whether the Google Cloud KMS configuration is valid","provider":"go.mondoo.com/mql/providers/mongodbatlas"}},"title":"MongoDB Atlas encryption-at-rest configuration","desc":"The customer-managed encryption-at-rest settings for the project. Covers whether encryption at rest with a customer key is enabled for each cloud provider (AWS KMS, Azure Key Vault, Google Cloud KMS) and for search nodes. Key material is never exposed.","min_provider_version":"13.0.0","defaults":"awsKmsEnabled azureKeyVaultEnabled googleCloudKmsEnabled","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"mongodbatlas.federationConfig":{"id":"mongodbatlas.federationConfig","name":"mongodbatlas.federationConfig","fields":{"federatedDomains":{"name":"federatedDomains","type":"\u0019\u0007","is_mandatory":true,"title":"Domains the organization has federated to its identity provider","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"hasRoleMappings":{"name":"hasRoleMappings","type":"\u0004","is_mandatory":true,"title":"Whether the organization has role mappings configured","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Federation settings id","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"identityProvider":{"name":"identityProvider","type":"\u001bmongodbatlas.identityProvider","title":"Identity provider connected to the organization","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"identityProviderStatus":{"name":"identityProviderStatus","type":"\u0007","is_mandatory":true,"title":"Status of the connected identity provider (ACTIVE or INACTIVE)","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"identityProviders":{"name":"identityProviders","type":"\u0019\u001bmongodbatlas.identityProvider","title":"Identity providers linked to the federation","provider":"go.mondoo.com/mql/providers/mongodbatlas"}},"title":"MongoDB Atlas identity federation settings","desc":"Organization-level identity federation configuration. Covers the connected identity provider and its status, whether role mappings are configured, the domains the organization has federated, and the identity providers linked to the federation. Present only when the organization has federation configured, and null otherwise.","min_provider_version":"13.0.1","defaults":"id identityProviderStatus","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"mongodbatlas.identityProvider":{"id":"mongodbatlas.identityProvider","name":"mongodbatlas.identityProvider","fields":{"associatedDomains":{"name":"associatedDomains","type":"\u0019\u0007","is_mandatory":true,"title":"Domains associated with the identity provider","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"authorizationType":{"name":"authorizationType","type":"\u0007","is_mandatory":true,"title":"OIDC authorization mode (GROUP for group membership or USER for user id)","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"clientId":{"name":"clientId","type":"\u0007","is_mandatory":true,"title":"OIDC client id assigned to the application by the identity provider","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"title":"Time the identity provider was created","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Description of the identity provider","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"displayName":{"name":"displayName","type":"\u0007","is_mandatory":true,"title":"Human-readable name of the identity provider","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"groupsClaim":{"name":"groupsClaim","type":"\u0007","is_mandatory":true,"title":"OIDC token claim that carries the identity provider group ids","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Identity provider id","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"idpType":{"name":"idpType","type":"\u0007","is_mandatory":true,"title":"Provider type (WORKFORCE or WORKLOAD)","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"issuerUri":{"name":"issuerUri","type":"\u0007","is_mandatory":true,"title":"Issuer URI of the SAML assertion or OIDC discovery document","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"protocol":{"name":"protocol","type":"\u0007","is_mandatory":true,"title":"Protocol of the identity provider (SAML or OIDC)","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"requestBinding":{"name":"requestBinding","type":"\u0007","is_mandatory":true,"title":"SAML authentication request binding (POST or REDIRECT)","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"requestedScopes":{"name":"requestedScopes","type":"\u0019\u0007","is_mandatory":true,"title":"OIDC scopes requested from the authorization endpoint","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"responseSignatureAlgorithm":{"name":"responseSignatureAlgorithm","type":"\u0007","is_mandatory":true,"title":"SAML response signature algorithm","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"ssoDebugEnabled":{"name":"ssoDebugEnabled","type":"\u0004","is_mandatory":true,"title":"Whether SAML SSO debug mode is enabled, which should be off in production","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"ssoUrl":{"name":"ssoUrl","type":"\u0007","is_mandatory":true,"title":"SAML single sign-on URL","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"status":{"name":"status","type":"\u0007","is_mandatory":true,"title":"Status of the identity provider (ACTIVE or INACTIVE)","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"updatedAt":{"name":"updatedAt","type":"\t","is_mandatory":true,"title":"Time the identity provider was last updated","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"userClaim":{"name":"userClaim","type":"\u0007","is_mandatory":true,"title":"OIDC token claim that carries the user id","provider":"go.mondoo.com/mql/providers/mongodbatlas"}},"title":"MongoDB Atlas identity provider","desc":"A SAML or OIDC identity provider linked to the organization's federation, keyed by id. Covers the protocol and provider type, the activation status, the issuer and associated domains, and the protocol-specific settings that matter for sign-in security (SAML request binding, response signature algorithm, and SSO debug mode; OIDC authorization type, client id, and requested scopes). Read providers from the federation settings, for example `mongodbatlas.federationConfig.identityProviders.where(ssoDebugEnabled == true)`.","min_provider_version":"13.0.1","defaults":"displayName protocol status","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"mongodbatlas.networkAccessEntry":{"id":"mongodbatlas.networkAccessEntry","name":"mongodbatlas.networkAccessEntry","fields":{"awsSecurityGroup":{"name":"awsSecurityGroup","type":"\u0007","is_mandatory":true,"title":"AWS security group granted access","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"cidrBlock":{"name":"cidrBlock","type":"\u0007","is_mandatory":true,"title":"CIDR block granted access","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"comment":{"name":"comment","type":"\u0007","is_mandatory":true,"title":"Comment describing the entry","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"deleteAfterDate":{"name":"deleteAfterDate","type":"\t","is_mandatory":true,"title":"Time after which the entry is automatically removed, null when permanent","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"ipAddress":{"name":"ipAddress","type":"\u0007","is_mandatory":true,"title":"Single IP address granted access","provider":"go.mondoo.com/mql/providers/mongodbatlas"}},"title":"MongoDB Atlas project IP access list entry","desc":"A single entry in the project's IP access list, keyed by its CIDR block or IP address. Only clients matching an entry may reach the project's clusters. Covers the CIDR block or address, an optional AWS security group, and any automatic expiry. Select an entry by value, for example `mongodbatlas.ipAccessList.where(cidrBlock == \"10.0.0.0/24\")`.","min_provider_version":"13.0.0","defaults":"cidrBlock ipAddress comment","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"mongodbatlas.networkPeering":{"id":"mongodbatlas.networkPeering","name":"mongodbatlas.networkPeering","fields":{"awsAccountId":{"name":"awsAccountId","type":"\u0007","is_mandatory":true,"title":"AWS account id of the peered VPC","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"containerId":{"name":"containerId","type":"\u0007","is_mandatory":true,"title":"Id of the Atlas network container","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Peering connection id","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"networkName":{"name":"networkName","type":"\u0007","is_mandatory":true,"title":"Peered GCP network name","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"providerName":{"name":"providerName","type":"\u0007","is_mandatory":true,"title":"Cloud provider (AWS, AZURE, or GCP)","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"routeTableCidrBlock":{"name":"routeTableCidrBlock","type":"\u0007","is_mandatory":true,"title":"CIDR block of the peered route table","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"status":{"name":"status","type":"\u0007","is_mandatory":true,"title":"Status of the peering connection","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"vnetName":{"name":"vnetName","type":"\u0007","is_mandatory":true,"title":"Peered Azure VNet name","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"vpcId":{"name":"vpcId","type":"\u0007","is_mandatory":true,"title":"Peered AWS VPC id","provider":"go.mondoo.com/mql/providers/mongodbatlas"}},"title":"MongoDB Atlas network peering connection","desc":"A VPC or VNet peering connection between the project's Atlas network and a customer network, keyed by id. Covers the cloud provider, the peered network identifiers, and the connection status. Fields vary by provider.","min_provider_version":"13.0.0","defaults":"providerName status","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"mongodbatlas.orgUser":{"id":"mongodbatlas.orgUser","name":"mongodbatlas.orgUser","fields":{"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"User id","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"lastAuth":{"name":"lastAuth","type":"\t","is_mandatory":true,"title":"Time the member last authenticated","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"orgMembershipStatus":{"name":"orgMembershipStatus","type":"\u0007","is_mandatory":true,"title":"Membership status (ACTIVE or PENDING)","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"orgRoles":{"name":"orgRoles","type":"\u0019\u0007","is_mandatory":true,"title":"Organization-level roles granted to the member","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"teams":{"name":"teams","type":"\u0019\u001bmongodbatlas.team","title":"Teams the member belongs to","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"username":{"name":"username","type":"\u0007","is_mandatory":true,"title":"Login name (email)","provider":"go.mondoo.com/mql/providers/mongodbatlas"}},"title":"MongoDB Atlas organization member","desc":"A user account that is a member of the organization, keyed by username (the login email). Covers the membership status, the organization-level roles, per-project role assignments, team memberships, and the last authentication time. Select a member by username, for example `mongodbatlas.orgUsers.where(username == \"alice@example.com\")`.","min_provider_version":"13.0.0","defaults":"username orgMembershipStatus","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"mongodbatlas.privateEndpointService":{"id":"mongodbatlas.privateEndpointService","name":"mongodbatlas.privateEndpointService","fields":{"cloudProvider":{"name":"cloudProvider","type":"\u0007","is_mandatory":true,"title":"Cloud provider (AWS, AZURE, or GCP)","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"errorMessage":{"name":"errorMessage","type":"\u0007","is_mandatory":true,"title":"Error message when the endpoint service is in an error state","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Endpoint service id","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"interfaceEndpoints":{"name":"interfaceEndpoints","type":"\u0019\u0007","is_mandatory":true,"title":"Interface endpoint ids attached to the service","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"regionName":{"name":"regionName","type":"\u0007","is_mandatory":true,"title":"Region the endpoint service is in","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"status":{"name":"status","type":"\u0007","is_mandatory":true,"title":"Status of the endpoint service","provider":"go.mondoo.com/mql/providers/mongodbatlas"}},"title":"MongoDB Atlas private endpoint service","desc":"A private endpoint service configured for the project on a single cloud provider, keyed by id. Private endpoints let clients reach clusters over the cloud provider's private network instead of the public internet. Covers the cloud provider, region, status, and the underlying endpoint identifiers.","min_provider_version":"13.0.0","defaults":"cloudProvider regionName status","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"mongodbatlas.project":{"id":"mongodbatlas.project","name":"mongodbatlas.project","fields":{"clusterCount":{"name":"clusterCount","type":"\u0005","is_mandatory":true,"title":"Number of clusters in the project","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"created":{"name":"created","type":"\t","is_mandatory":true,"title":"Time the project was created","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Project id","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Project name","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"orgId":{"name":"orgId","type":"\u0007","is_mandatory":true,"title":"Id of the organization that owns the project","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"regionUsageRestrictions":{"name":"regionUsageRestrictions","type":"\u0007","is_mandatory":true,"title":"Government region restriction (Atlas for Government), empty for commercial projects","provider":"go.mondoo.com/mql/providers/mongodbatlas"}},"title":"MongoDB Atlas project","desc":"A project (also called a group) in the organization, keyed by id. Covers the owning organization, the number of clusters, the creation time, and any government region restrictions. Select a project by name, for example `mongodbatlas.projects.where(name == \"production\")`.","min_provider_version":"13.0.0","defaults":"name id orgId","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"mongodbatlas.projectConfig":{"id":"mongodbatlas.projectConfig","name":"mongodbatlas.projectConfig","fields":{"isCollectDatabaseSpecificsStatisticsEnabled":{"name":"isCollectDatabaseSpecificsStatisticsEnabled","type":"\u0004","is_mandatory":true,"title":"Whether collection of database-specific statistics is enabled","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"isDataExplorerEnabled":{"name":"isDataExplorerEnabled","type":"\u0004","is_mandatory":true,"title":"Whether the Data Explorer (in-console data browsing) is enabled","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"isDataExplorerGenAIFeaturesEnabled":{"name":"isDataExplorerGenAIFeaturesEnabled","type":"\u0004","is_mandatory":true,"title":"Whether Data Explorer generative AI features are enabled","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"isExtendedStorageSizesEnabled":{"name":"isExtendedStorageSizesEnabled","type":"\u0004","is_mandatory":true,"title":"Whether extended storage sizes are enabled","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"isPerformanceAdvisorEnabled":{"name":"isPerformanceAdvisorEnabled","type":"\u0004","is_mandatory":true,"title":"Whether the Performance Advisor is enabled","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"isRealtimePerformancePanelEnabled":{"name":"isRealtimePerformancePanelEnabled","type":"\u0004","is_mandatory":true,"title":"Whether the real-time performance panel is enabled","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"isSchemaAdvisorEnabled":{"name":"isSchemaAdvisorEnabled","type":"\u0004","is_mandatory":true,"title":"Whether the Schema Advisor is enabled","provider":"go.mondoo.com/mql/providers/mongodbatlas"}},"title":"MongoDB Atlas project feature settings","desc":"Feature toggles for the project, such as whether the Data Explorer and its generative AI features are enabled and whether the performance and schema advisors are active. These govern which in-console data-access and analysis features are exposed.","min_provider_version":"13.0.0","defaults":"isDataExplorerEnabled","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"mongodbatlas.pushBasedLogConfig":{"id":"mongodbatlas.pushBasedLogConfig","name":"mongodbatlas.pushBasedLogConfig","fields":{"bucketName":{"name":"bucketName","type":"\u0007","is_mandatory":true,"title":"Name of the AWS S3 bucket logs are delivered to","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"cloudProviderAccessRole":{"name":"cloudProviderAccessRole","type":"\u001bmongodbatlas.cloudProviderAccessRole","title":"Cloud provider access role Atlas assumes to write to the bucket","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"prefixPath":{"name":"prefixPath","type":"\u0007","is_mandatory":true,"title":"Object key prefix under which logs are written in the bucket","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"state":{"name":"state","type":"\u0007","is_mandatory":true,"title":"Configuration state (such as ACTIVE, UNCONFIGURED, or INITIATING)","provider":"go.mondoo.com/mql/providers/mongodbatlas"}},"title":"MongoDB Atlas push-based log export configuration","desc":"The push-based log export configuration for the project, which delivers database audit and access logs to a customer-owned AWS S3 bucket. Covers the destination bucket, the AWS IAM role Atlas assumes to write to it, the object key prefix, and the configuration state. Present only when push-based log export has been configured, and null otherwise.","min_provider_version":"13.0.1","defaults":"state bucketName","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"mongodbatlas.resourcePolicy":{"id":"mongodbatlas.resourcePolicy","name":"mongodbatlas.resourcePolicy","fields":{"createdByUser":{"name":"createdByUser","type":"\u0007","is_mandatory":true,"title":"Name of the user who created the policy","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"createdDate":{"name":"createdDate","type":"\t","is_mandatory":true,"title":"Time the policy was created","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Description of the resource policy","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Resource policy id","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"lastUpdatedByUser":{"name":"lastUpdatedByUser","type":"\u0007","is_mandatory":true,"title":"Name of the user who last updated the policy","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"lastUpdatedDate":{"name":"lastUpdatedDate","type":"\t","is_mandatory":true,"title":"Time the policy was last updated","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Resource policy name","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"policies":{"name":"policies","type":"\u0019\n","is_mandatory":true,"title":"Policy statements, each with its id and Cedar policy body","provider":"go.mondoo.com/mql/providers/mongodbatlas"}},"title":"MongoDB Atlas resource policy","desc":"An organization-level Atlas Resource Policy, keyed by id. Resource policies are Cedar-based guardrails that constrain what actions can be taken on Atlas resources across the organization (for example restricting the cloud providers or regions clusters may deploy to). Covers the name, description, the users and times of creation and last update, and the individual policy statements. Select a policy by name, for example `mongodbatlas.resourcePolicies.where(name == \"restrict-regions\")`.","min_provider_version":"13.0.1","defaults":"name id","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"mongodbatlas.searchIndex":{"id":"mongodbatlas.searchIndex","name":"mongodbatlas.searchIndex","fields":{"collectionName":{"name":"collectionName","type":"\u0007","is_mandatory":true,"title":"Collection the index is built on","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"database":{"name":"database","type":"\u0007","is_mandatory":true,"title":"Database the index is built on","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Index id","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"latestDefinition":{"name":"latestDefinition","type":"\n","is_mandatory":true,"title":"Most recent index definition","desc":"The full index configuration. For a vector search index this holds the fields (each with a type of vector or filter, numDimensions, similarity, and path) and numPartitions. For a full-text search index it holds the analyzer, analyzers, mappings, searchAnalyzer, synonyms, and the storedSource clause that governs which document fields are copied into the index.","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"latestDefinitionVersion":{"name":"latestDefinitionVersion","type":"\n","is_mandatory":true,"title":"Version metadata for the most recent index definition, with version and createdAt","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Index name","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"queryable":{"name":"queryable","type":"\u0004","is_mandatory":true,"title":"Whether the index is currently queryable","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"status":{"name":"status","type":"\u0007","is_mandatory":true,"title":"Build status","desc":"One of READY, BUILDING, FAILED, STALE, PENDING, or DELETING.","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"statusDetail":{"name":"statusDetail","type":"\u0019\n","is_mandatory":true,"title":"Per-host build status detail","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Index kind","desc":"The discriminator between the two index families: \"search\" for a full-text Atlas Search index and \"vectorSearch\" for an Atlas Vector Search index.","provider":"go.mondoo.com/mql/providers/mongodbatlas"}},"title":"MongoDB Atlas search or vector search index","desc":"A single Atlas Search or Atlas Vector Search index defined on a cluster, covering both index kinds through the type discriminator: \"search\" for a full-text Atlas Search index and \"vectorSearch\" for an Atlas Vector Search index. Reports the database and collection the index is built on, its build status and whether it is currently queryable, and the full index definition. The latestDefinition field carries the index configuration: for vector search the vector and filter fields with their numDimensions, similarity function, and path, plus numPartitions; for full-text search the analyzer, analyzers, mappings, searchAnalyzer, synonyms, and the storedSource clause that governs which document fields are copied into the index.","min_provider_version":"13.0.1","defaults":"name type database collectionName status","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"mongodbatlas.serviceAccount":{"id":"mongodbatlas.serviceAccount","name":"mongodbatlas.serviceAccount","fields":{"clientId":{"name":"clientId","type":"\u0007","is_mandatory":true,"title":"OAuth client id","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"title":"Time the service account was created","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Description of the service account","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Service account name","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"roles":{"name":"roles","type":"\u0019\u0007","is_mandatory":true,"title":"Organization roles granted to the service account","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"secrets":{"name":"secrets","type":"\u0019\n","is_mandatory":true,"title":"Issued secrets, each with its id, creation, expiry, and last-used times (no secret values)","provider":"go.mondoo.com/mql/providers/mongodbatlas"}},"title":"MongoDB Atlas service account","desc":"A service account in the organization, keyed by its client id. Covers the granted organization roles and the secrets issued to it (their ids and expiry times, never the secret values). Select an account by client id, for example `mongodbatlas.serviceAccounts.where(name == \"automation\")`.","min_provider_version":"13.0.0","defaults":"name clientId","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"mongodbatlas.team":{"id":"mongodbatlas.team","name":"mongodbatlas.team","fields":{"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Team id","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Team name","provider":"go.mondoo.com/mql/providers/mongodbatlas"},"users":{"name":"users","type":"\u0019\u001bmongodbatlas.orgUser","title":"Members of the team","provider":"go.mondoo.com/mql/providers/mongodbatlas"}},"title":"MongoDB Atlas team","desc":"A team in the organization, keyed by name. Teams group members for role assignment on projects. Select a team by name, for example `mongodbatlas.teams.where(name == \"platform\")`.","min_provider_version":"13.0.0","defaults":"name id","provider":"go.mondoo.com/mql/providers/mongodbatlas"}}}