Control Plane auditing records administrative events initiated through the Atlas control plane, including actions performed in the Atlas UI. It provides oversight at both project and organization levels, and supports review in the UI or retrieval through the Atlas API. section 20.4
Use Control Plane auditing to:
- Monitor administrative activity performed by users through Atlas interfaces. section 20.4
- Review user-management activity and configuration changes as part of defense in depth. section 20.7
- Retrieve audit data through the Atlas API for integration with broader monitoring workflows. section 20.4
Control Plane auditing differs from MongoDB database auditing. The former observes Atlas administration, while the latter monitors database activities and selected user, role, LDAP-group, read, and write actions within a project. Atlas auditing is unavailable for M0 and Flex clusters. section 20.4
Administrative change review
When investigating an unexpected Atlas change, review Control Plane audit records in the Atlas UI or obtain them through the Atlas API, then examine activity at the relevant project or organization level. section 20.4 section 20.7
