Medium
DMS
Regional
DMS endpoints for MongoDB should have an authentication mechanism enabled
NIST 800-53PCI DSS v4.0.1PCI DSS v7.3.1
Description
Confirms that AWS DMS endpoints for MongoDB have an authentication mechanism enabled. Without authentication, unauthorized users could access data during migration.
Remediation
Enable authentication for your DMS endpoints that connect to MongoDB databases to ensure secure access control.
Steps
- Navigate to the AWS DMS console
- Go to the Endpoints section
- Select the MongoDB endpoint that needs authentication
- Modify the endpoint configuration
- In the 'Authentication' section, provide username and password
- Set the authentication type to 'MONGODB-CR' for MongoDB 2.x or 'SCRAM-SHA-1' for MongoDB 3.x+
- Configure the authentication mechanism based on your MongoDB version
- Save the configuration changes
- Verify that authentication is now enabled for the MongoDB endpoint
Compliance
NIST 800-53PCI DSS v4.0.1PCI DSS v7.3.1