Medium DMS Regional

DMS endpoints for MongoDB should have an authentication mechanism enabled

NIST 800-53PCI DSS v4.0.1PCI DSS v7.3.1

Description

Confirms that AWS DMS endpoints for MongoDB have an authentication mechanism enabled. Without authentication, unauthorized users could access data during migration.


Remediation

Enable authentication for your DMS endpoints that connect to MongoDB databases to ensure secure access control.

Steps

  1. Navigate to the AWS DMS console
  2. Go to the Endpoints section
  3. Select the MongoDB endpoint that needs authentication
  4. Modify the endpoint configuration
  5. In the 'Authentication' section, provide username and password
  6. Set the authentication type to 'MONGODB-CR' for MongoDB 2.x or 'SCRAM-SHA-1' for MongoDB 3.x+
  7. Configure the authentication mechanism based on your MongoDB version
  8. Save the configuration changes
  9. Verify that authentication is now enabled for the MongoDB endpoint

Compliance

NIST 800-53PCI DSS v4.0.1PCI DSS v7.3.1