https://github.com/nullstone-modules/mongo-db-admin
This is a utility to administer mongo databases that are behind a firewall.
https://github.com/nullstone-modules/mongo-db-admin
Last synced: 5 months ago
JSON representation
This is a utility to administer mongo databases that are behind a firewall.
- Host: GitHub
- URL: https://github.com/nullstone-modules/mongo-db-admin
- Owner: nullstone-modules
- Created: 2021-08-20T15:21:59.000Z (almost 5 years ago)
- Default Branch: main
- Last Pushed: 2024-03-14T21:36:25.000Z (about 2 years ago)
- Last Synced: 2024-06-21T08:18:37.816Z (almost 2 years ago)
- Language: Go
- Size: 25.4 KB
- Stars: 0
- Watchers: 2
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# mongo-db-admin
This is a utility to administer mongo databases that are behind a firewall.
The published docker image runs with a lambda entrypoint.
Using a lambda that is on the same VPC as the database, this utility can ensure a database exists with a specific owner.
This utilizes AWS IAM to secure administration instead of using an SSH Tunnel or VPN.
This also limits the actions that a user can take, making it extremely hard to perform malicious commands.
## AWS Lambda setup
The Lambda requires specific configuration to work properly:
- A SecretsManager Secret containing the connection string as a postgres URL.
- `DB_CONN_URL_SECRET_ID` env var containing ARN of the AWS SecretsManager Secret.
- The execution role must have access to the above secret.
- The executing lambda must have network access to the mongo cluster.