This white paper explains how cloud security responsibilities are divided among customers, MongoDB, and infrastructure providers when using MongoDB Atlas. Cloud providers secure physical facilities, operating systems, and virtualization infrastructure, while MongoDB is responsible for Atlas platform security, availability, authentication defaults, encryption, network isolation, patching, and other managed controls. Customers remain responsible for their data, accounts, identities, roles, devices, cloud regions, backup configurations, network connectivity, and security policies. Some controls, including auditing, encryption key management, data residency, and identity federation, are shared. The paper emphasizes that secure cloud adoption depends on understanding these boundaries and config

Join for free to read