mongodb-atlas Dialect

Version and compatibility

Version: 0.1.0.

Provider bindings and declared compatibility

• mongodb/mongodbatlas: = 2.16.0.

All official Dialects

Interpreted types

Each row identifies a type and instance kind. Conditional Rules retain their individual conditions in the details below.

Terraform type	Kind	Classification	Rules
mongodbatlas_advanced_cluster	resource	managed-database	advanced-cluster
mongodbatlas_ai_model_rate_limit	resource	search-configuration	ai-model-rate-limit
mongodbatlas_alert_configuration	resource	observability-configuration	alert-configuration
mongodbatlas_api_key_project_assignment	resource	identity-configuration	api-key-project-assignment
mongodbatlas_auditing	resource	security-configuration	auditing
mongodbatlas_backup_compliance_policy	resource	backup-configuration	backup-compliance-policy
mongodbatlas_cloud_backup_schedule	resource	backup-plan	cloud-backup-schedule
mongodbatlas_cloud_backup_snapshot_export_bucket	resource	backup-export-destination	cloud-backup-export-destination
mongodbatlas_cloud_provider_access_authorization	resource	cloud-provider-authorization	cloud-provider-access-authorization
mongodbatlas_cloud_provider_access_setup	resource	cloud-provider-access	cloud-provider-access-setup
mongodbatlas_cloud_user_org_assignment	resource	identity-configuration	cloud-user-organization-assignment
mongodbatlas_cloud_user_project_assignment	resource	identity-configuration	cloud-user-project-assignment
mongodbatlas_cloud_user_team_assignment	resource	identity-configuration	cloud-user-team-assignment
mongodbatlas_cluster	resource	managed-database	cluster
mongodbatlas_custom_db_role	resource	identity-configuration	custom-database-role
mongodbatlas_custom_dns_configuration_cluster_aws	resource	network-configuration	custom-dns-configuration-aws
mongodbatlas_database_user	resource	identity-configuration	database-user
mongodbatlas_encryption_at_rest_private_endpoint	resource	private-endpoint	encryption-private-endpoint
mongodbatlas_encryption_at_rest	resource	customer-key-management	encryption-at-rest
mongodbatlas_event_trigger	resource	event-trigger	event-trigger
mongodbatlas_federated_database_instance	resource	federated-database-instance	federated-database-instance
mongodbatlas_federated_query_limit	resource	federation-configuration	federated-query-limit
mongodbatlas_federated_settings_identity_provider	resource	identity-provider	federated-identity-provider
mongodbatlas_federated_settings_org_config	resource	identity-configuration	federated-organization-configuration
mongodbatlas_federated_settings_org_role_mapping	resource	identity-configuration	federated-organization-role-mapping
mongodbatlas_flex_cluster	resource	managed-database	flex-cluster
mongodbatlas_global_cluster_config	resource	database-configuration	global-cluster-configuration
mongodbatlas_ldap_configuration	resource	identity-provider	ldap-configuration
mongodbatlas_log_integration	resource	log-integration	log-integration
mongodbatlas_maintenance_window	resource	database-configuration	maintenance-window
mongodbatlas_metric_integration	resource	metric-integration	metric-integration
mongodbatlas_network_container	resource	atlas-network-container	network-container
mongodbatlas_network_peering	resource	network-peering	network-peering
mongodbatlas_online_archive	resource	online-archive	online-archive
mongodbatlas_organization	resource	organization	organization
mongodbatlas_private_endpoint_regional_mode	resource	network-configuration	private-endpoint-regional-mode
mongodbatlas_privatelink_endpoint_service_data_federation_online_archive	resource	data-service-private-endpoint	data-service-private-endpoint
mongodbatlas_privatelink_endpoint_service	resource	private-endpoint-registration	private-endpoint-registration
mongodbatlas_privatelink_endpoint	resource	private-endpoint-service	private-endpoint-service
mongodbatlas_project_ip_access_list	resource	network-configuration	project-ip-access-list
mongodbatlas_project_service_account_access_list_entry	resource	identity-configuration	project-service-account-access-list
mongodbatlas_project_service_account	resource	service-identity	project-service-account
mongodbatlas_project	resource	project	project
mongodbatlas_push_based_log_export	resource	log-integration	push-based-log-export
mongodbatlas_resource_policy	resource	governance-configuration	resource-policy
mongodbatlas_search_deployment	resource	search-deployment	search-deployment
mongodbatlas_search_index	resource	search-configuration	search-index
mongodbatlas_serverless_instance	resource	managed-database	serverless-instance
mongodbatlas_service_account_access_list_entry	resource	identity-configuration	organization-service-account-access-list
mongodbatlas_service_account_project_assignment	resource	identity-configuration	service-account-project-assignment
mongodbatlas_service_account	resource	service-identity	organization-service-account
mongodbatlas_stream_connection_failover	resource	stream-configuration	stream-connection-failover
mongodbatlas_stream_connection	resource	stream-connection	stream-connection
mongodbatlas_stream_instance	resource	stream-processing-workspace	stream-instance
mongodbatlas_stream_privatelink_endpoint	resource	private-endpoint	stream-private-endpoint
mongodbatlas_stream_processor	resource	stream-processor	stream-processor
mongodbatlas_stream_workspace	resource	stream-processing-workspace	stream-workspace
mongodbatlas_team_project_assignment	resource	identity-configuration	team-project-assignment
mongodbatlas_team	resource	identity-group	team
mongodbatlas_third_party_integration	resource	observability-configuration	third-party-integration
mongodbatlas_x509_authentication_database_user	resource	identity-configuration	x509-database-user

Local vocabulary

Concepts

mongodb-atlas.concept.atlas-network-container Source

An Atlas address-space container used to configure peering, not a customer virtual network.

Used by network-container, network-peering.

mongodb-atlas.concept.backup-configuration Source

A backup compliance or retention configuration supporting an Atlas project.

Used by backup-compliance-policy.

mongodb-atlas.concept.backup-export-destination Source

A MongoDB Atlas cloud backup export destination backed by customer object storage.

Used by cloud-backup-export-destination, cloud-backup-schedule.

mongodb-atlas.concept.backup-plan Source

A managed policy scheduling and retaining backups.

Used by cloud-backup-schedule.

mongodb-atlas.concept.cloud-provider-access Source

A MongoDB Atlas project integration prepared to access a customer cloud provider.

Used by cloud-provider-access-authorization, cloud-provider-access-setup.

mongodb-atlas.concept.cloud-provider-authorization Source

An authorized customer cloud identity that MongoDB Atlas can assume or use.

Used by 6 Rules

• cloud-backup-export-destination
• cloud-provider-access-authorization
• encryption-at-rest
• federated-database-instance
• log-integration
• push-based-log-export

mongodb-atlas.concept.customer-key-management Source

MongoDB Atlas project-level encryption at rest using customer-managed cloud keys.

Used by encryption-at-rest.

mongodb-atlas.concept.data-service-private-endpoint Source

A private endpoint connection for Atlas Data Federation or Online Archive.

Used by data-service-private-endpoint.

mongodb-atlas.concept.database-configuration Source

A configuration supporting MongoDB Atlas database deployments within a project.

Used by global-cluster-configuration, maintenance-window.

mongodb-atlas.concept.event-trigger Source

A MongoDB Atlas App Services trigger responding to a database, schedule, or authentication event.

Used by event-trigger.

mongodb-atlas.concept.federated-database-instance Source

An Atlas Data Federation instance querying Atlas deployments and external data stores through virtual databases.

Used by federated-database-instance.

mongodb-atlas.concept.federation-configuration Source

A query or storage configuration supporting Atlas Data Federation.

Used by federated-query-limit.

mongodb-atlas.concept.governance-configuration Source

A policy or administrative configuration supporting an Atlas organization or project.

Used by resource-policy.

mongodb-atlas.concept.identity-configuration Source

An identity, role, assignment, credential boundary, or access setting supporting Atlas.

Used by 13 Rules

• api-key-project-assignment
• cloud-user-organization-assignment
• cloud-user-project-assignment
• cloud-user-team-assignment
• custom-database-role
• database-user
• federated-organization-configuration
• federated-organization-role-mapping
• organization-service-account-access-list
• project-service-account-access-list
• service-account-project-assignment
• team-project-assignment
• x509-database-user

mongodb-atlas.concept.identity-group Source

A managed group principal used to assign access collectively.

Used by cloud-user-team-assignment, team, team-project-assignment.

mongodb-atlas.concept.identity-provider Source

An external identity provider integrated with MongoDB Atlas.

Used by federated-identity-provider, ldap-configuration.

mongodb-atlas.concept.log-integration Source

A MongoDB Atlas integration exporting project logs to an external observability or storage service.

Used by log-integration, push-based-log-export.

mongodb-atlas.concept.metric-integration Source

A MongoDB Atlas integration exporting project metrics to an external observability service.

Used by metric-integration.

mongodb-atlas.concept.network-configuration Source

A network access, DNS, or private-connectivity setting supporting an Atlas project.

Used by custom-dns-configuration-aws, private-endpoint-regional-mode, project-ip-access-list.

mongodb-atlas.concept.network-peering Source

A direct private connectivity agreement between virtual networks.

Used by network-peering.

mongodb-atlas.concept.observability-configuration Source

An alert or third-party notification configuration supporting Atlas observability.

Used by alert-configuration, third-party-integration.

mongodb-atlas.concept.online-archive Source

An Atlas Online Archive tiering infrequently accessed data from a database deployment.

Used by online-archive.

mongodb-atlas.concept.organization Source

A MongoDB Atlas organization owning projects, access, and billing boundaries.

Used by 10 Rules

• cloud-user-organization-assignment
• cloud-user-team-assignment
• federated-organization-configuration
• federated-organization-role-mapping
• organization
• organization-service-account
• organization-service-account-access-list
• project
• resource-policy
• team

mongodb-atlas.concept.private-endpoint Source

A private endpoint exposing a service inside a virtual network.

Used by 5 Rules

• data-service-private-endpoint
• encryption-private-endpoint
• private-endpoint-registration
• stream-connection
• stream-private-endpoint

mongodb-atlas.concept.private-endpoint-registration Source

A registration joining an Atlas private endpoint service to a customer cloud private endpoint.

Used by private-endpoint-registration.

mongodb-atlas.concept.private-endpoint-service Source

A MongoDB Atlas regional private endpoint service exposed to a customer cloud network.

Used by private-endpoint-registration, private-endpoint-service.

mongodb-atlas.concept.project Source

A MongoDB Atlas project isolating database deployments, networking, access, and service configuration.

Used by 49 Rules

• advanced-cluster
• ai-model-rate-limit
• alert-configuration
• api-key-project-assignment
• auditing
• backup-compliance-policy
• cloud-backup-export-destination
• cloud-backup-schedule
• cloud-provider-access-authorization
• cloud-provider-access-setup
• cloud-user-project-assignment
• cluster
• custom-database-role
• custom-dns-configuration-aws
• data-service-private-endpoint
• database-user
• encryption-at-rest
• encryption-private-endpoint
• event-trigger
• federated-database-instance
• federated-query-limit
• flex-cluster
• global-cluster-configuration
• ldap-configuration
• log-integration
• maintenance-window
• metric-integration
• network-container
• network-peering
• online-archive
• private-endpoint-regional-mode
• private-endpoint-registration
• private-endpoint-service
• project
• project-ip-access-list
• project-service-account
• project-service-account-access-list
• push-based-log-export
• search-deployment
• serverless-instance
• service-account-project-assignment
• stream-connection
• stream-instance
• stream-private-endpoint
• stream-processor
• stream-workspace
• team-project-assignment
• third-party-integration
• x509-database-user

mongodb-atlas.concept.search-configuration Source

A search, vector-search, or AI model configuration supporting Atlas.

Used by ai-model-rate-limit, search-index.

mongodb-atlas.concept.search-deployment Source

A dedicated MongoDB Search deployment providing isolated search compute for an Atlas database deployment.

Used by search-deployment.

mongodb-atlas.concept.security-configuration Source

A security configuration supporting a MongoDB Atlas project.

Used by auditing.

mongodb-atlas.concept.stream-configuration Source

A failover or runtime configuration supporting Atlas Stream Processing.

Used by stream-connection-failover.

mongodb-atlas.concept.stream-connection Source

A neutral source or sink connection registered with an Atlas Stream Processing workspace.

Used by stream-connection, stream-connection-failover.

mongodb-atlas.concept.stream-processing-workspace Source

An Atlas Stream Processing workspace owning processors and registered source or sink connections.

Used by stream-instance, stream-workspace.

mongodb-atlas.concept.stream-processor Source

An Atlas Stream Processing processor continuously executing a declared aggregation pipeline.

Used by stream-processor.

Contexts

mongodb-atlas.context.ownership Source

Administrative or lifecycle ownership.

Used by 32 Rules

• advanced-cluster
• cloud-backup-export-destination
• cloud-backup-schedule
• cloud-provider-access-authorization
• cloud-provider-access-setup
• cluster
• data-service-private-endpoint
• encryption-at-rest
• encryption-private-endpoint
• event-trigger
• federated-database-instance
• flex-cluster
• ldap-configuration
• log-integration
• metric-integration
• network-container
• network-peering
• online-archive
• organization-service-account
• private-endpoint-registration
• private-endpoint-service
• project
• project-service-account
• push-based-log-export
• search-deployment
• serverless-instance
• stream-connection
• stream-instance
• stream-private-endpoint
• stream-processor
• stream-workspace
• team

Relations

mongodb-atlas.relation.archives-from Source

Introduced by a labeled emission. Used by online-archive.

mongodb-atlas.relation.authorizes-access Source

Introduced by a labeled emission. Used by cloud-provider-access-authorization.

mongodb-atlas.relation.authorizes-cloud-identity Source

Introduced by a labeled emission. Used by cloud-provider-access-authorization.

mongodb-atlas.relation.connects-atlas-network Source

Introduced by a labeled emission. Used by network-peering.

mongodb-atlas.relation.connects-cloud-network Source

Introduced by a labeled emission. Used by network-peering.

mongodb-atlas.relation.connects-to-database Source

Introduced by a labeled emission. Used by stream-connection.

mongodb-atlas.relation.connects-to-network-service Source

Introduced by a labeled emission. Used by stream-private-endpoint.

mongodb-atlas.relation.exports-to Source

Introduced by a labeled emission. Used by cloud-backup-schedule.

mongodb-atlas.relation.exports-to-storage Source

Introduced by a labeled emission. Used by log-integration, push-based-log-export.

mongodb-atlas.relation.protects Source

Introduced by a labeled emission. Used by cloud-backup-schedule.

mongodb-atlas.relation.reads-from-database Source

Introduced by a labeled emission. Used by federated-database-instance.

mongodb-atlas.relation.reads-from-storage Source

Introduced by a labeled emission. Used by federated-database-instance.

mongodb-atlas.relation.registers-atlas-service Source

Introduced by a labeled emission. Used by private-endpoint-registration.

mongodb-atlas.relation.registers-cloud-endpoint Source

Introduced by a labeled emission. Used by private-endpoint-registration.

mongodb-atlas.relation.serves Source

Introduced by a labeled emission. Used by search-deployment.

mongodb-atlas.relation.stores-in Source

Introduced by a labeled emission. Used by cloud-backup-export-destination.

mongodb-atlas.relation.uses-cloud-authorization Source

Introduced by a labeled emission.

Used by 5 Rules

• cloud-backup-export-destination
• encryption-at-rest
• federated-database-instance
• log-integration
• push-based-log-export

mongodb-atlas.relation.uses-cloud-endpoint Source

Introduced by a labeled emission. Used by data-service-private-endpoint.

mongodb-atlas.relation.uses-cloud-identity Source

Introduced by a labeled emission. Used by cloud-provider-access-setup, stream-connection.

mongodb-atlas.relation.uses-private-endpoint Source

Introduced by a labeled emission. Used by stream-connection.

RF Vocabulary used

• rf.concept.managed-database
• rf.concept.object-storage-container
• rf.concept.service-identity
• rf.concept.virtual-network
• rf.context.runtime

Rule details

Open a Rule for its declared behavior and source. Matching, emission resolution and composition define how evidence can establish it.

mongodb-atlas.rule.advanced-cluster Source

Matches resource instances of mongodbatlas_advanced_cluster.

Classification: rf.concept.managed-database.

Contexts

• mongodb-atlas.context.ownership: targets mongodb-atlas.concept.project through source.project_id.

Conditions, identity and resolution

Identity

• attributes: ["name"]
• scope: "provider"

Endpoint

• attributes: ["cluster_id", "name"]

Context through source.project_id

• on_null: "absent"
• on_empty: "absent"
• external: "allow"
• match.by: target.id
• match.strategy: "exact"

mongodb-atlas.rule.ai-model-rate-limit Source

Matches resource instances of mongodbatlas_ai_model_rate_limit.

Classification: mongodb-atlas.concept.search-configuration.

Contributions

• targets mongodb-atlas.concept.project through source.project_id.

Conditions, identity and resolution

Contribution through source.project_id

• on_null: "absent"
• on_empty: "absent"
• external: "allow"
• match.by: target.id
• match.strategy: "exact"

mongodb-atlas.rule.alert-configuration Source

Matches resource instances of mongodbatlas_alert_configuration.

Classification: mongodb-atlas.concept.observability-configuration.

Contributions

• targets mongodb-atlas.concept.project through source.project_id.

Conditions, identity and resolution

Contribution through source.project_id

• on_null: "absent"
• on_empty: "absent"
• external: "allow"
• match.by: target.id
• match.strategy: "exact"

mongodb-atlas.rule.api-key-project-assignment Source

Matches resource instances of mongodbatlas_api_key_project_assignment.

Classification: mongodb-atlas.concept.identity-configuration.

Contributions

• targets mongodb-atlas.concept.project through source.project_id.

Conditions, identity and resolution

Contribution through source.project_id

• on_null: "absent"
• on_empty: "absent"
• external: "allow"
• match.by: target.id
• match.strategy: "exact"

mongodb-atlas.rule.auditing Source

Matches resource instances of mongodbatlas_auditing.

Classification: mongodb-atlas.concept.security-configuration.

Contributions

• targets mongodb-atlas.concept.project through source.project_id.

Conditions, identity and resolution

Contribution through source.project_id

• on_null: "absent"
• on_empty: "absent"
• external: "allow"
• match.by: target.id
• match.strategy: "exact"

mongodb-atlas.rule.backup-compliance-policy Source

Matches resource instances of mongodbatlas_backup_compliance_policy.

Classification: mongodb-atlas.concept.backup-configuration.

Contributions

• targets mongodb-atlas.concept.project through source.project_id.

Conditions, identity and resolution

Contribution through source.project_id

• on_null: "absent"
• on_empty: "absent"
• external: "allow"
• match.by: target.id
• match.strategy: "exact"

mongodb-atlas.rule.cloud-backup-schedule Source

Matches resource instances of mongodbatlas_cloud_backup_schedule.

Classification: mongodb-atlas.concept.backup-plan.

Contexts

• mongodb-atlas.context.ownership: targets mongodb-atlas.concept.project through source.project_id.

Relations

• mongodb-atlas.relation.protects: targets rf.concept.managed-database through source.cluster_name.
• mongodb-atlas.relation.exports-to: targets mongodb-atlas.concept.backup-export-destination through source.export[0].export_bucket_id.

Conditions, identity and resolution

Context through source.project_id

• on_null: "absent"
• on_empty: "absent"
• external: "allow"
• match.by: target.id
• match.strategy: "exact"

Relation through source.cluster_name

• on_null: "absent"
• on_empty: "absent"
• external: "allow"
• match.by: target.name
• match.strategy: "exact"

Relation through source.export[0].export_bucket_id

• on_null: "absent"
• on_empty: "absent"
• match.by: target.export_bucket_id
• match.strategy: "exact"

mongodb-atlas.rule.cloud-backup-export-destination Source

Matches resource instances of mongodbatlas_cloud_backup_snapshot_export_bucket.

Classification: mongodb-atlas.concept.backup-export-destination.

Contexts

• mongodb-atlas.context.ownership: targets mongodb-atlas.concept.project through source.project_id.

Relations

• mongodb-atlas.relation.stores-in: targets rf.concept.object-storage-container through source.bucket_name.
• mongodb-atlas.relation.uses-cloud-authorization: targets mongodb-atlas.concept.cloud-provider-authorization through source.iam_role_id.
• mongodb-atlas.relation.uses-cloud-authorization: targets mongodb-atlas.concept.cloud-provider-authorization through source.role_id.

Conditions, identity and resolution

Identity

• attributes: ["id", "export_bucket_id"]
• scope: "provider"

Endpoint

• attributes: ["id", "export_bucket_id"]

Context through source.project_id

• on_null: "absent"
• on_empty: "absent"
• external: "allow"
• match.by: target.id
• match.strategy: "exact"

Relation through source.bucket_name

• on_null: "absent"
• on_empty: "absent"

Relation through source.iam_role_id

• on_null: "absent"
• on_empty: "absent"
• external: "allow"
• match.by: target.role_id
• match.strategy: "exact"

Relation through source.role_id

• on_null: "absent"
• on_empty: "absent"
• external: "allow"
• match.by: target.role_id
• match.strategy: "exact"

mongodb-atlas.rule.cloud-provider-access-authorization Source

Matches resource instances of mongodbatlas_cloud_provider_access_authorization.

Classification: mongodb-atlas.concept.cloud-provider-authorization.

Contexts

• mongodb-atlas.context.ownership: targets mongodb-atlas.concept.project through source.project_id.

Relations

• mongodb-atlas.relation.authorizes-cloud-identity: targets rf.concept.service-identity through source.azure[0].service_principal_id.
• mongodb-atlas.relation.authorizes-access: targets mongodb-atlas.concept.cloud-provider-access through source.role_id.

Conditions, identity and resolution

Identity

• attributes: ["id", "role_id"]
• scope: "provider"

Endpoint

• attributes: ["id", "role_id"]

Context through source.project_id

• on_null: "absent"
• on_empty: "absent"
• external: "allow"
• match.by: target.id
• match.strategy: "exact"

Relation through source.azure[0].service_principal_id

• on_null: "absent"
• on_empty: "absent"
• external: "allow"
• match.by: target.principal_id
• match.strategy: "exact"

Relation through source.role_id

• on_null: "absent"
• on_empty: "absent"
• match.by: target.role_id
• match.strategy: "exact"

mongodb-atlas.rule.cloud-provider-access-setup Source

Matches resource instances of mongodbatlas_cloud_provider_access_setup.

Classification: mongodb-atlas.concept.cloud-provider-access.

Contexts

• mongodb-atlas.context.ownership: targets mongodb-atlas.concept.project through source.project_id.

Relations

• mongodb-atlas.relation.uses-cloud-identity: targets rf.concept.service-identity through source.azure_config[0].service_principal_id.

Conditions, identity and resolution

Identity

• attributes: ["id", "role_id"]
• scope: "provider"

Endpoint

• attributes: ["id", "role_id"]

Context through source.project_id

• on_null: "absent"
• on_empty: "absent"
• external: "allow"
• match.by: target.id
• match.strategy: "exact"

Relation through source.azure_config[0].service_principal_id

• on_null: "absent"
• on_empty: "absent"
• external: "allow"
• match.by: target.principal_id
• match.strategy: "exact"

mongodb-atlas.rule.cloud-user-organization-assignment Source

Matches resource instances of mongodbatlas_cloud_user_org_assignment.

Classification: mongodb-atlas.concept.identity-configuration.

Contributions

• targets mongodb-atlas.concept.organization through source.org_id.

Conditions, identity and resolution

Contribution through source.org_id

• on_null: "absent"
• on_empty: "absent"
• external: "allow"
• match.by: target.id
• match.strategy: "exact"

mongodb-atlas.rule.cloud-user-project-assignment Source

Matches resource instances of mongodbatlas_cloud_user_project_assignment.

Classification: mongodb-atlas.concept.identity-configuration.

Contributions

• targets mongodb-atlas.concept.project through source.project_id.

Conditions, identity and resolution

Contribution through source.project_id

• on_null: "absent"
• on_empty: "absent"
• external: "allow"
• match.by: target.id
• match.strategy: "exact"

mongodb-atlas.rule.cloud-user-team-assignment Source

Matches resource instances of mongodbatlas_cloud_user_team_assignment.

Classification: mongodb-atlas.concept.identity-configuration.

Contributions

• targets mongodb-atlas.concept.organization through source.org_id.
• targets mongodb-atlas.concept.identity-group through source.team_id.

Conditions, identity and resolution

Contribution through source.org_id

• on_null: "absent"
• on_empty: "absent"
• external: "allow"
• match.by: target.id
• match.strategy: "exact"

Contribution through source.team_id

• on_null: "absent"
• on_empty: "absent"
• match.by: target.team_id
• match.strategy: "exact"

mongodb-atlas.rule.cluster Source

Matches resource instances of mongodbatlas_cluster.

Classification: rf.concept.managed-database.

Contexts

• mongodb-atlas.context.ownership: targets mongodb-atlas.concept.project through source.project_id.

Conditions, identity and resolution

Identity

• attributes: ["name"]
• scope: "provider"

Endpoint

• attributes: ["id", "name"]

Context through source.project_id

• on_null: "absent"
• on_empty: "absent"
• external: "allow"
• match.by: target.id
• match.strategy: "exact"

mongodb-atlas.rule.custom-database-role Source

Matches resource instances of mongodbatlas_custom_db_role.

Classification: mongodb-atlas.concept.identity-configuration.

Contributions

• targets mongodb-atlas.concept.project through source.project_id.

Conditions, identity and resolution

Contribution through source.project_id

• on_null: "absent"
• on_empty: "absent"
• external: "allow"
• match.by: target.id
• match.strategy: "exact"

mongodb-atlas.rule.custom-dns-configuration-aws Source

Matches resource instances of mongodbatlas_custom_dns_configuration_cluster_aws.

Classification: mongodb-atlas.concept.network-configuration.

Contributions

• targets mongodb-atlas.concept.project through source.project_id.

Conditions, identity and resolution

Contribution through source.project_id

• on_null: "absent"
• on_empty: "absent"
• external: "allow"
• match.by: target.id
• match.strategy: "exact"

mongodb-atlas.rule.database-user Source

Matches resource instances of mongodbatlas_database_user.

Classification: mongodb-atlas.concept.identity-configuration.

Contributions

• targets mongodb-atlas.concept.project through source.project_id.

Conditions, identity and resolution

Contribution through source.project_id

• on_null: "absent"
• on_empty: "absent"
• external: "allow"
• match.by: target.id
• match.strategy: "exact"

mongodb-atlas.rule.encryption-private-endpoint Source

Matches resource instances of mongodbatlas_encryption_at_rest_private_endpoint.

Classification: mongodb-atlas.concept.private-endpoint.

Contexts

• mongodb-atlas.context.ownership: targets mongodb-atlas.concept.project through source.project_id.

Conditions, identity and resolution

Identity

• attributes: ["id"]
• scope: "provider"

Endpoint

• attributes: ["id"]

Context through source.project_id

• on_null: "absent"
• on_empty: "absent"
• external: "allow"
• match.by: target.id
• match.strategy: "exact"

mongodb-atlas.rule.encryption-at-rest Source

Matches resource instances of mongodbatlas_encryption_at_rest.

Classification: mongodb-atlas.concept.customer-key-management.

Contexts

• mongodb-atlas.context.ownership: targets mongodb-atlas.concept.project through source.project_id.

Relations

• mongodb-atlas.relation.uses-cloud-authorization: targets mongodb-atlas.concept.cloud-provider-authorization through source.aws_kms_config[0].role_id.
• mongodb-atlas.relation.uses-cloud-authorization: targets mongodb-atlas.concept.cloud-provider-authorization through source.azure_key_vault_config[0].role_id.
• mongodb-atlas.relation.uses-cloud-authorization: targets mongodb-atlas.concept.cloud-provider-authorization through source.google_cloud_kms_config[0].role_id.

Conditions, identity and resolution

Context through source.project_id

• on_null: "absent"
• on_empty: "absent"
• external: "allow"
• match.by: target.id
• match.strategy: "exact"

Relation through source.aws_kms_config[0].role_id

• on_null: "absent"
• on_empty: "absent"
• external: "allow"
• match.by: target.role_id
• match.strategy: "exact"

Relation through source.azure_key_vault_config[0].role_id

• on_null: "absent"
• on_empty: "absent"
• external: "allow"
• match.by: target.role_id
• match.strategy: "exact"

Relation through source.google_cloud_kms_config[0].role_id

• on_null: "absent"
• on_empty: "absent"
• external: "allow"
• match.by: target.role_id
• match.strategy: "exact"

mongodb-atlas.rule.event-trigger Source

Matches resource instances of mongodbatlas_event_trigger.

Classification: mongodb-atlas.concept.event-trigger.

Contexts

• mongodb-atlas.context.ownership: targets mongodb-atlas.concept.project through source.project_id.

Conditions, identity and resolution

Context through source.project_id

• on_null: "absent"
• on_empty: "absent"
• external: "allow"
• match.by: target.id
• match.strategy: "exact"

mongodb-atlas.rule.federated-database-instance Source

Matches resource instances of mongodbatlas_federated_database_instance.

Classification: mongodb-atlas.concept.federated-database-instance.

Contexts

• mongodb-atlas.context.ownership: targets mongodb-atlas.concept.project through source.project_id.

Relations

• mongodb-atlas.relation.reads-from-storage: targets rf.concept.object-storage-container through source.storage_stores[0].bucket.
• mongodb-atlas.relation.reads-from-database: targets rf.concept.managed-database through source.storage_stores[0].cluster_name.
• mongodb-atlas.relation.uses-cloud-authorization: targets mongodb-atlas.concept.cloud-provider-authorization through source.cloud_provider_config[0].aws[0].role_id.
• mongodb-atlas.relation.uses-cloud-authorization: targets mongodb-atlas.concept.cloud-provider-authorization through source.cloud_provider_config[0].azure[0].role_id.

Conditions, identity and resolution

Context through source.project_id

• on_null: "absent"
• on_empty: "absent"
• external: "allow"
• match.by: target.id
• match.strategy: "exact"

Relation through source.storage_stores[0].bucket

• on_null: "absent"
• on_empty: "absent"

Relation through source.storage_stores[0].cluster_name

• on_null: "absent"
• on_empty: "absent"
• external: "allow"
• match.by: target.name
• match.strategy: "exact"

Relation through source.cloud_provider_config[0].aws[0].role_id

• on_null: "absent"
• on_empty: "absent"
• external: "allow"
• match.by: target.role_id
• match.strategy: "exact"

Relation through source.cloud_provider_config[0].azure[0].role_id

• on_null: "absent"
• on_empty: "absent"
• external: "allow"
• match.by: target.role_id
• match.strategy: "exact"

mongodb-atlas.rule.federated-query-limit Source

Matches resource instances of mongodbatlas_federated_query_limit.

Classification: mongodb-atlas.concept.federation-configuration.

Contributions

• targets mongodb-atlas.concept.project through source.project_id.

Conditions, identity and resolution

Contribution through source.project_id

• on_null: "absent"
• on_empty: "absent"
• external: "allow"
• match.by: target.id
• match.strategy: "exact"

mongodb-atlas.rule.federated-identity-provider Source

Matches resource instances of mongodbatlas_federated_settings_identity_provider.

Classification: mongodb-atlas.concept.identity-provider.

mongodb-atlas.rule.federated-organization-configuration Source

Matches resource instances of mongodbatlas_federated_settings_org_config.

Classification: mongodb-atlas.concept.identity-configuration.

Contributions

• targets mongodb-atlas.concept.organization through source.org_id.

Conditions, identity and resolution

Contribution through source.org_id

• on_null: "absent"
• on_empty: "absent"
• external: "allow"
• match.by: target.id
• match.strategy: "exact"

mongodb-atlas.rule.federated-organization-role-mapping Source

Matches resource instances of mongodbatlas_federated_settings_org_role_mapping.

Classification: mongodb-atlas.concept.identity-configuration.

Contributions

• targets mongodb-atlas.concept.organization through source.org_id.

Conditions, identity and resolution

Contribution through source.org_id

• on_null: "absent"
• on_empty: "absent"
• external: "allow"
• match.by: target.id
• match.strategy: "exact"

mongodb-atlas.rule.flex-cluster Source

Matches resource instances of mongodbatlas_flex_cluster.

Classification: rf.concept.managed-database.

Contexts

• mongodb-atlas.context.ownership: targets mongodb-atlas.concept.project through source.project_id.

Conditions, identity and resolution

Identity

• attributes: ["name"]
• scope: "provider"

Endpoint

• attributes: ["id", "name"]

Context through source.project_id

• on_null: "absent"
• on_empty: "absent"
• external: "allow"
• match.by: target.id
• match.strategy: "exact"

mongodb-atlas.rule.global-cluster-configuration Source

Matches resource instances of mongodbatlas_global_cluster_config.

Classification: mongodb-atlas.concept.database-configuration.

Contributions

• targets rf.concept.managed-database through source.cluster_name.
• targets mongodb-atlas.concept.project through source.project_id.

Conditions, identity and resolution

Contribution through source.cluster_name

• on_null: "absent"
• on_empty: "absent"
• external: "allow"
• match.by: target.name
• match.strategy: "exact"

Contribution through source.project_id

• on_null: "absent"
• on_empty: "absent"
• external: "allow"
• match.by: target.id
• match.strategy: "exact"

mongodb-atlas.rule.ldap-configuration Source

Matches resource instances of mongodbatlas_ldap_configuration.

Classification: mongodb-atlas.concept.identity-provider.

Contexts

• mongodb-atlas.context.ownership: targets mongodb-atlas.concept.project through source.project_id.

Conditions, identity and resolution

Context through source.project_id

• on_null: "absent"
• on_empty: "absent"
• external: "allow"
• match.by: target.id
• match.strategy: "exact"

mongodb-atlas.rule.log-integration Source

Matches resource instances of mongodbatlas_log_integration.

Classification: mongodb-atlas.concept.log-integration.

Contexts

• mongodb-atlas.context.ownership: targets mongodb-atlas.concept.project through source.project_id.

Relations

• mongodb-atlas.relation.exports-to-storage: targets rf.concept.object-storage-container through source.bucket_name.
• mongodb-atlas.relation.exports-to-storage: targets rf.concept.object-storage-container through source.storage_container_name.
• mongodb-atlas.relation.uses-cloud-authorization: targets mongodb-atlas.concept.cloud-provider-authorization through source.iam_role_id.
• mongodb-atlas.relation.uses-cloud-authorization: targets mongodb-atlas.concept.cloud-provider-authorization through source.role_id.

Conditions, identity and resolution

Context through source.project_id

• on_null: "absent"
• on_empty: "absent"
• external: "allow"
• match.by: target.id
• match.strategy: "exact"

Relation through source.bucket_name

• on_null: "absent"
• on_empty: "absent"

Relation through source.storage_container_name

• on_null: "absent"
• on_empty: "absent"

Relation through source.iam_role_id

• on_null: "absent"
• on_empty: "absent"
• external: "allow"
• match.by: target.role_id
• match.strategy: "exact"

Relation through source.role_id

• on_null: "absent"
• on_empty: "absent"
• external: "allow"
• match.by: target.role_id
• match.strategy: "exact"

mongodb-atlas.rule.maintenance-window Source

Matches resource instances of mongodbatlas_maintenance_window.

Classification: mongodb-atlas.concept.database-configuration.

Contributions

• targets mongodb-atlas.concept.project through source.project_id.

Conditions, identity and resolution

Contribution through source.project_id

• on_null: "absent"
• on_empty: "absent"
• external: "allow"
• match.by: target.id
• match.strategy: "exact"

mongodb-atlas.rule.metric-integration Source

Matches resource instances of mongodbatlas_metric_integration.

Classification: mongodb-atlas.concept.metric-integration.

Contexts

• mongodb-atlas.context.ownership: targets mongodb-atlas.concept.project through source.project_id.

Conditions, identity and resolution

Context through source.project_id

• on_null: "absent"
• on_empty: "absent"
• external: "allow"
• match.by: target.id
• match.strategy: "exact"

mongodb-atlas.rule.network-container Source

Matches resource instances of mongodbatlas_network_container.

Classification: mongodb-atlas.concept.atlas-network-container.

Contexts

• mongodb-atlas.context.ownership: targets mongodb-atlas.concept.project through source.project_id.

Conditions, identity and resolution

Identity

• attributes: ["id", "container_id"]
• scope: "provider"

Endpoint

• attributes: ["id", "container_id"]

Context through source.project_id

• on_null: "absent"
• on_empty: "absent"
• external: "allow"
• match.by: target.id
• match.strategy: "exact"

mongodb-atlas.rule.network-peering Source

Matches resource instances of mongodbatlas_network_peering.

Classification: mongodb-atlas.concept.network-peering.

Contexts

• mongodb-atlas.context.ownership: targets mongodb-atlas.concept.project through source.project_id.

Relations

• mongodb-atlas.relation.connects-atlas-network: targets mongodb-atlas.concept.atlas-network-container through source.container_id.
• mongodb-atlas.relation.connects-cloud-network: targets rf.concept.virtual-network through source.vpc_id.
• mongodb-atlas.relation.connects-cloud-network: targets rf.concept.virtual-network through source.vnet_name.
• mongodb-atlas.relation.connects-cloud-network: targets rf.concept.virtual-network through source.network_name.

Conditions, identity and resolution

Context through source.project_id

• on_null: "absent"
• on_empty: "absent"
• external: "allow"
• match.by: target.id
• match.strategy: "exact"

Relation through source.container_id

• on_null: "absent"
• on_empty: "absent"
• match.by: target.container_id
• match.strategy: "exact"

Relation through source.vpc_id

• on_null: "absent"
• on_empty: "absent"

Relation through source.vnet_name

• on_null: "absent"
• on_empty: "absent"

Relation through source.network_name

• on_null: "absent"
• on_empty: "absent"

mongodb-atlas.rule.online-archive Source

Matches resource instances of mongodbatlas_online_archive.

Classification: mongodb-atlas.concept.online-archive.

Contexts

• mongodb-atlas.context.ownership: targets mongodb-atlas.concept.project through source.project_id.

Relations

• mongodb-atlas.relation.archives-from: targets rf.concept.managed-database through source.cluster_name.

Conditions, identity and resolution

Context through source.project_id

• on_null: "absent"
• on_empty: "absent"
• external: "allow"
• match.by: target.id
• match.strategy: "exact"

Relation through source.cluster_name

• on_null: "absent"
• on_empty: "absent"
• external: "allow"
• match.by: target.name
• match.strategy: "exact"

mongodb-atlas.rule.organization Source

Matches resource instances of mongodbatlas_organization.

Classification: mongodb-atlas.concept.organization.

Conditions, identity and resolution

Identity

• attributes: ["id"]
• scope: "provider"

Endpoint

• attributes: ["id"]

mongodb-atlas.rule.private-endpoint-regional-mode Source

Matches resource instances of mongodbatlas_private_endpoint_regional_mode.

Classification: mongodb-atlas.concept.network-configuration.

Contributions

• targets mongodb-atlas.concept.project through source.project_id.

Conditions, identity and resolution

Contribution through source.project_id

• on_null: "absent"
• on_empty: "absent"
• external: "allow"
• match.by: target.id
• match.strategy: "exact"

mongodb-atlas.rule.data-service-private-endpoint Source

Matches resource instances of mongodbatlas_privatelink_endpoint_service_data_federation_online_archive.

Classification: mongodb-atlas.concept.data-service-private-endpoint.

Contexts

• mongodb-atlas.context.ownership: targets mongodb-atlas.concept.project through source.project_id.

Relations

• mongodb-atlas.relation.uses-cloud-endpoint: targets mongodb-atlas.concept.private-endpoint through source.endpoint_id.

Conditions, identity and resolution

Context through source.project_id

• on_null: "absent"
• on_empty: "absent"
• external: "allow"
• match.by: target.id
• match.strategy: "exact"

Relation through source.endpoint_id

• on_null: "absent"
• on_empty: "absent"
• match.by: target.id
• match.strategy: "exact"

mongodb-atlas.rule.private-endpoint-registration Source

Matches resource instances of mongodbatlas_privatelink_endpoint_service.

Classification: mongodb-atlas.concept.private-endpoint-registration.

Contexts

• mongodb-atlas.context.ownership: targets mongodb-atlas.concept.project through source.project_id.

Relations

• mongodb-atlas.relation.registers-atlas-service: targets mongodb-atlas.concept.private-endpoint-service through source.private_link_id.
• mongodb-atlas.relation.registers-cloud-endpoint: targets mongodb-atlas.concept.private-endpoint through source.endpoint_service_id.

Conditions, identity and resolution

Context through source.project_id

• on_null: "absent"
• on_empty: "absent"
• external: "allow"
• match.by: target.id
• match.strategy: "exact"

Relation through source.private_link_id

• on_null: "absent"
• on_empty: "absent"
• match.by: target.private_link_id
• match.strategy: "exact"

Relation through source.endpoint_service_id

• on_null: "absent"
• on_empty: "absent"
• match.by: target.id
• match.strategy: "exact"

mongodb-atlas.rule.private-endpoint-service Source

Matches resource instances of mongodbatlas_privatelink_endpoint.

Classification: mongodb-atlas.concept.private-endpoint-service.

Contexts

• mongodb-atlas.context.ownership: targets mongodb-atlas.concept.project through source.project_id.

Conditions, identity and resolution

Identity

• attributes: ["id", "private_link_id"]
• scope: "provider"

Endpoint

• attributes: ["id", "private_link_id"]

Context through source.project_id

• on_null: "absent"
• on_empty: "absent"
• external: "allow"
• match.by: target.id
• match.strategy: "exact"

mongodb-atlas.rule.project-ip-access-list Source

Matches resource instances of mongodbatlas_project_ip_access_list.

Classification: mongodb-atlas.concept.network-configuration.

Contributions

• targets mongodb-atlas.concept.project through source.project_id.

Conditions, identity and resolution

Contribution through source.project_id

• on_null: "absent"
• on_empty: "absent"
• external: "allow"
• match.by: target.id
• match.strategy: "exact"

mongodb-atlas.rule.project-service-account-access-list Source

Matches resource instances of mongodbatlas_project_service_account_access_list_entry.

Classification: mongodb-atlas.concept.identity-configuration.

Contributions

• targets rf.concept.service-identity through source.client_id.
• targets mongodb-atlas.concept.project through source.project_id.

Conditions, identity and resolution

Contribution through source.client_id

• on_null: "absent"
• on_empty: "absent"
• external: "allow"
• match.by: target.client_id
• match.strategy: "exact"

Contribution through source.project_id

• on_null: "absent"
• on_empty: "absent"
• external: "allow"
• match.by: target.id
• match.strategy: "exact"

mongodb-atlas.rule.project-service-account Source

Matches resource instances of mongodbatlas_project_service_account.

Classification: rf.concept.service-identity.

Contexts

• mongodb-atlas.context.ownership: targets mongodb-atlas.concept.project through source.project_id.

Conditions, identity and resolution

Identity

• attributes: ["client_id"]
• scope: "provider"

Endpoint

• attributes: ["client_id"]

Context through source.project_id

• on_null: "absent"
• on_empty: "absent"
• external: "allow"
• match.by: target.id
• match.strategy: "exact"

mongodb-atlas.rule.project Source

Matches resource instances of mongodbatlas_project.

Classification: mongodb-atlas.concept.project.

Contexts

• mongodb-atlas.context.ownership: targets mongodb-atlas.concept.organization through source.org_id.

Conditions, identity and resolution

Identity

• attributes: ["id"]
• scope: "provider"

Endpoint

• attributes: ["id"]

Context through source.org_id

• on_null: "absent"
• on_empty: "absent"
• external: "allow"
• match.by: target.id
• match.strategy: "exact"

mongodb-atlas.rule.push-based-log-export Source

Matches resource instances of mongodbatlas_push_based_log_export.

Classification: mongodb-atlas.concept.log-integration.

Contexts

• mongodb-atlas.context.ownership: targets mongodb-atlas.concept.project through source.project_id.

Relations

• mongodb-atlas.relation.exports-to-storage: targets rf.concept.object-storage-container through source.bucket_name.
• mongodb-atlas.relation.uses-cloud-authorization: targets mongodb-atlas.concept.cloud-provider-authorization through source.iam_role_id.

Conditions, identity and resolution

Context through source.project_id

• on_null: "absent"
• on_empty: "absent"
• external: "allow"
• match.by: target.id
• match.strategy: "exact"

Relation through source.bucket_name

• on_null: "absent"
• on_empty: "absent"

Relation through source.iam_role_id

• on_null: "absent"
• on_empty: "absent"
• external: "allow"
• match.by: target.role_id
• match.strategy: "exact"

mongodb-atlas.rule.resource-policy Source

Matches resource instances of mongodbatlas_resource_policy.

Classification: mongodb-atlas.concept.governance-configuration.

Contributions

• targets mongodb-atlas.concept.organization through source.org_id.

Conditions, identity and resolution

Contribution through source.org_id

• on_null: "absent"
• on_empty: "absent"
• external: "allow"
• match.by: target.id
• match.strategy: "exact"

mongodb-atlas.rule.search-deployment Source

Matches resource instances of mongodbatlas_search_deployment.

Classification: mongodb-atlas.concept.search-deployment.

Contexts

• mongodb-atlas.context.ownership: targets mongodb-atlas.concept.project through source.project_id.

Relations

• mongodb-atlas.relation.serves: targets rf.concept.managed-database through source.cluster_name.

Conditions, identity and resolution

Context through source.project_id

• on_null: "absent"
• on_empty: "absent"
• external: "allow"
• match.by: target.id
• match.strategy: "exact"

Relation through source.cluster_name

• on_null: "absent"
• on_empty: "absent"
• external: "allow"
• match.by: target.name
• match.strategy: "exact"

mongodb-atlas.rule.search-index Source

Matches resource instances of mongodbatlas_search_index.

Classification: mongodb-atlas.concept.search-configuration.

Contributions

• targets rf.concept.managed-database through source.cluster_name.

Conditions, identity and resolution

Contribution through source.cluster_name

• on_null: "absent"
• on_empty: "absent"
• external: "allow"
• match.by: target.name
• match.strategy: "exact"

mongodb-atlas.rule.serverless-instance Source

Matches resource instances of mongodbatlas_serverless_instance.

Classification: rf.concept.managed-database.

Contexts

• mongodb-atlas.context.ownership: targets mongodb-atlas.concept.project through source.project_id.

Conditions, identity and resolution

Identity

• attributes: ["name"]
• scope: "provider"

Endpoint

• attributes: ["id", "name"]

Context through source.project_id

• on_null: "absent"
• on_empty: "absent"
• external: "allow"
• match.by: target.id
• match.strategy: "exact"

mongodb-atlas.rule.organization-service-account-access-list Source

Matches resource instances of mongodbatlas_service_account_access_list_entry.

Classification: mongodb-atlas.concept.identity-configuration.

Contributions

• targets rf.concept.service-identity through source.client_id.
• targets mongodb-atlas.concept.organization through source.org_id.

Conditions, identity and resolution

Contribution through source.client_id

• on_null: "absent"
• on_empty: "absent"
• external: "allow"
• match.by: target.client_id
• match.strategy: "exact"

Contribution through source.org_id

• on_null: "absent"
• on_empty: "absent"
• external: "allow"
• match.by: target.id
• match.strategy: "exact"

mongodb-atlas.rule.service-account-project-assignment Source

Matches resource instances of mongodbatlas_service_account_project_assignment.

Classification: mongodb-atlas.concept.identity-configuration.

Contributions

• targets rf.concept.service-identity through source.client_id.
• targets mongodb-atlas.concept.project through source.project_id.

Conditions, identity and resolution

Contribution through source.client_id

• on_null: "absent"
• on_empty: "absent"
• external: "allow"
• match.by: target.client_id
• match.strategy: "exact"

Contribution through source.project_id

• on_null: "absent"
• on_empty: "absent"
• external: "allow"
• match.by: target.id
• match.strategy: "exact"

mongodb-atlas.rule.organization-service-account Source

Matches resource instances of mongodbatlas_service_account.

Classification: rf.concept.service-identity.

Contexts

• mongodb-atlas.context.ownership: targets mongodb-atlas.concept.organization through source.org_id.

Conditions, identity and resolution

Identity

• attributes: ["client_id"]
• scope: "provider"

Endpoint

• attributes: ["client_id"]

Context through source.org_id

• on_null: "absent"
• on_empty: "absent"
• external: "allow"
• match.by: target.id
• match.strategy: "exact"

mongodb-atlas.rule.stream-connection-failover Source

Matches resource instances of mongodbatlas_stream_connection_failover.

Classification: mongodb-atlas.concept.stream-configuration.

Contributions

• targets mongodb-atlas.concept.stream-connection through source.connection_name.

Conditions, identity and resolution

Contribution through source.connection_name

• on_null: "absent"
• on_empty: "absent"
• match.by: target.connection_name
• match.strategy: "exact"

mongodb-atlas.rule.stream-connection Source

Matches resource instances of mongodbatlas_stream_connection.

Classification: mongodb-atlas.concept.stream-connection.

Contexts

• mongodb-atlas.context.ownership: targets mongodb-atlas.concept.project through source.project_id.
• rf.context.runtime: targets mongodb-atlas.rule.stream-workspace through source.workspace_name.
• rf.context.runtime: targets mongodb-atlas.rule.stream-instance through source.instance_name.

Relations

• mongodb-atlas.relation.connects-to-database: targets rf.concept.managed-database through source.cluster_name.
• mongodb-atlas.relation.uses-cloud-identity: targets rf.concept.service-identity through source.azure.service_principal_id.
• mongodb-atlas.relation.uses-cloud-identity: targets rf.concept.service-identity through source.gcp.service_account_id.
• mongodb-atlas.relation.uses-private-endpoint: targets mongodb-atlas.concept.private-endpoint through source.networking.access.connection_id.

Conditions, identity and resolution

Identity

• attributes: ["connection_name"]
• scope: "provider"

Endpoint

• attributes: ["id", "connection_name"]

Context through source.project_id

• on_null: "absent"
• on_empty: "absent"
• external: "allow"
• match.by: target.id
• match.strategy: "exact"

Context through source.workspace_name

• on_null: "absent"
• on_empty: "absent"
• match.by: target.workspace_name
• match.strategy: "exact"

Context through source.instance_name

• on_null: "absent"
• on_empty: "absent"
• match.by: target.instance_name
• match.strategy: "exact"

Relation through source.cluster_name

• on_null: "absent"
• on_empty: "absent"
• external: "allow"
• match.by: target.name
• match.strategy: "exact"

Relation through source.azure.service_principal_id

• on_null: "absent"
• on_empty: "absent"
• external: "allow"
• match.by: target.principal_id
• match.strategy: "exact"

Relation through source.gcp.service_account_id

• on_null: "absent"
• on_empty: "absent"
• external: "allow"
• match.by: target.id
• match.strategy: "exact"

Relation through source.networking.access.connection_id

• on_null: "absent"
• on_empty: "absent"
• match.by: target.id
• match.strategy: "exact"

mongodb-atlas.rule.stream-instance Source

Matches resource instances of mongodbatlas_stream_instance.

Classification: mongodb-atlas.concept.stream-processing-workspace.

Contexts

• mongodb-atlas.context.ownership: targets mongodb-atlas.concept.project through source.project_id.

Conditions, identity and resolution

Identity

• attributes: ["instance_name"]
• scope: "provider"

Endpoint

• attributes: ["id", "instance_name"]

Context through source.project_id

• on_null: "absent"
• on_empty: "absent"
• external: "allow"
• match.by: target.id
• match.strategy: "exact"

mongodb-atlas.rule.stream-private-endpoint Source

Matches resource instances of mongodbatlas_stream_privatelink_endpoint.

Classification: mongodb-atlas.concept.private-endpoint.

Contexts

• mongodb-atlas.context.ownership: targets mongodb-atlas.concept.project through source.project_id.

Relations

• mongodb-atlas.relation.connects-to-network-service: targets rf.concept.virtual-network through source.service_endpoint_id.

Conditions, identity and resolution

Identity

• attributes: ["id"]
• scope: "provider"

Endpoint

• attributes: ["id"]

Context through source.project_id

• on_null: "absent"
• on_empty: "absent"
• external: "allow"
• match.by: target.id
• match.strategy: "exact"

Relation through source.service_endpoint_id

• on_null: "absent"
• on_empty: "absent"

mongodb-atlas.rule.stream-processor Source

Matches resource instances of mongodbatlas_stream_processor.

Classification: mongodb-atlas.concept.stream-processor.

Contexts

• mongodb-atlas.context.ownership: targets mongodb-atlas.concept.project through source.project_id.
• rf.context.runtime: targets mongodb-atlas.rule.stream-workspace through source.workspace_name.
• rf.context.runtime: targets mongodb-atlas.rule.stream-instance through source.instance_name.

Conditions, identity and resolution

Context through source.project_id

• on_null: "absent"
• on_empty: "absent"
• external: "allow"
• match.by: target.id
• match.strategy: "exact"

Context through source.workspace_name

• on_null: "absent"
• on_empty: "absent"
• match.by: target.workspace_name
• match.strategy: "exact"

Context through source.instance_name

• on_null: "absent"
• on_empty: "absent"
• match.by: target.instance_name
• match.strategy: "exact"

mongodb-atlas.rule.stream-workspace Source

Matches resource instances of mongodbatlas_stream_workspace.

Classification: mongodb-atlas.concept.stream-processing-workspace.

Contexts

• mongodb-atlas.context.ownership: targets mongodb-atlas.concept.project through source.project_id.

Conditions, identity and resolution

Identity

• attributes: ["workspace_name"]
• scope: "provider"

Endpoint

• attributes: ["id", "workspace_name"]

Context through source.project_id

• on_null: "absent"
• on_empty: "absent"
• external: "allow"
• match.by: target.id
• match.strategy: "exact"

mongodb-atlas.rule.team-project-assignment Source

Matches resource instances of mongodbatlas_team_project_assignment.

Classification: mongodb-atlas.concept.identity-configuration.

Contributions

• targets mongodb-atlas.concept.identity-group through source.team_id.
• targets mongodb-atlas.concept.project through source.project_id.

Conditions, identity and resolution

Contribution through source.team_id

• on_null: "absent"
• on_empty: "absent"
• match.by: target.team_id
• match.strategy: "exact"

Contribution through source.project_id

• on_null: "absent"
• on_empty: "absent"
• external: "allow"
• match.by: target.id
• match.strategy: "exact"

mongodb-atlas.rule.team Source

Matches resource instances of mongodbatlas_team.

Classification: mongodb-atlas.concept.identity-group.

Contexts

• mongodb-atlas.context.ownership: targets mongodb-atlas.concept.organization through source.org_id.

Conditions, identity and resolution

Identity

• attributes: ["id", "team_id"]
• scope: "provider"

Endpoint

• attributes: ["id", "team_id"]

Context through source.org_id

• on_null: "absent"
• on_empty: "absent"
• external: "allow"
• match.by: target.id
• match.strategy: "exact"

mongodb-atlas.rule.third-party-integration Source

Matches resource instances of mongodbatlas_third_party_integration.

Classification: mongodb-atlas.concept.observability-configuration.

Contributions

• targets mongodb-atlas.concept.project through source.project_id.

Conditions, identity and resolution

Contribution through source.project_id

• on_null: "absent"
• on_empty: "absent"
• external: "allow"
• match.by: target.id
• match.strategy: "exact"

mongodb-atlas.rule.x509-database-user Source

Matches resource instances of mongodbatlas_x509_authentication_database_user.

Classification: mongodb-atlas.concept.identity-configuration.

Contributions

• targets mongodb-atlas.concept.project through source.project_id.

Conditions, identity and resolution

Contribution through source.project_id

• on_null: "absent"
• on_empty: "absent"
• external: "allow"
• match.by: target.id
• match.strategy: "exact"