An IP access list restricts a protected Atlas deployment to explicitly permitted network addresses. Addresses absent from the list cannot connect, keeping clusters closed to unwanted internet traffic. section 20.6 section 20.6.1
Apply IP access lists with these operational practices:
- Permit only small, specific ranges, preferably individual /32 addresses, rather than broad CIDR blocks. section 20.6.1
- Create temporary entries with expiration times when access is needed from short-lived or changing locations. section 20.6.1
- Treat the list as one network-control layer alongside VPC isolation, private endpoints, authentication, authorization, and encryption. section 20.7
atlas accessLists create –currentIp
Use the Atlas CLI command listing to create an access-list entry for the current IP; the Atlas UI provides an alternative configuration path. section 20.6.1
