PSRule.Rules.Azure icon indicating copy to clipboard operation
PSRule.Rules.Azure copied to clipboard

[RULE] Check if Entra auth is enabled for MongoDB vCore clusters

Open BernieWhite opened this issue 5 months ago • 0 comments

Existing rule

No response

Suggested rule

Now that Entra ID auth is available for use in MongoDB vCore clusters (in preview) for Microsoft.DocumentDB/mongoClusters, this should be used instead of password-based auth.

The Microsoft Entra ID authentication feature has these current limitations:

  • This feature isn't supported on replica clusters.
  • This feature isn't supported on restored clusters.
  • This feature isn't supported with Mongo shell (mongosh) or MongoDB Compass.

Pillar

Security

Additional context

  • https://learn.microsoft.com/en-au/azure/cosmos-db/mongodb/vcore/how-to-configure-entra-authentication?tabs=connection-uri
  • https://learn.microsoft.com/en-gb/azure/well-architected/security/identity-access#use-identity-based-authentication

BernieWhite avatar May 21 '25 05:05 BernieWhite