PSRule.Rules.Azure
PSRule.Rules.Azure copied to clipboard
[RULE] Check if Entra auth is enabled for MongoDB vCore clusters
Existing rule
No response
Suggested rule
Now that Entra ID auth is available for use in MongoDB vCore clusters (in preview) for Microsoft.DocumentDB/mongoClusters, this should be used instead of password-based auth.
The Microsoft Entra ID authentication feature has these current limitations:
- This feature isn't supported on replica clusters.
- This feature isn't supported on restored clusters.
- This feature isn't supported with Mongo shell (mongosh) or MongoDB Compass.
Pillar
Security
Additional context
- https://learn.microsoft.com/en-au/azure/cosmos-db/mongodb/vcore/how-to-configure-entra-authentication?tabs=connection-uri
- https://learn.microsoft.com/en-gb/azure/well-architected/security/identity-access#use-identity-based-authentication