Shared-responsibility model

As explained in MongoDB 8.0 in Action, Third Edition

A shared responsibility model is a security arrangement that divides operational and security obligations among a service provider, infrastructure providers, and customers.

A shared responsibility model divides Atlas security and operational obligations among customers, MongoDB, and underlying cloud providers. Atlas manages platform security and database operations, while customers manage data access, identities, and selected settings. section 20.1

Apply the model by separating responsibilities across three parties:

• Customers manage data, accounts, roles, identity providers, multifactor authentication, cloud-provider and region selection, infrastructure tiers, connectivity, audit filters, and backup schedules. section 20.1
• MongoDB manages Atlas platform security, database operations, secure data-access tooling, continuous enforcement, authentication, localization, and encryption in transit and at rest. section 20.1
• Cloud providers such as AWS, GCP, and Azure provide physical security and infrastructure. section 20.1 section 20.8
• Treat initial security configuration as shared: customers select and enable settings, then MongoDB continuously enforces essential controls. section 20.1

Atlas security setup

Configure federation, LDAP, or MFA; choose data-residency policies; enable KMS or BYOK encryption; configure network connectivity, auditing filters, and backups. MongoDB then continuously enforces authentication, localization, and encryption controls. section 20.1

Figure 20.1 The shared responsibility model in Atlas divides security and operational tasks among customers, MongoDB, and the underlying cloud providers (AWS, GCP, and Azure). (Image © MongoDB 2024 CC BY-NC-SA 3.0)

Use the responsibility diagram to locate security and operational duties across the customer, MongoDB, and cloud-infrastructure layers. section 20.1

How MongoDB 8.0 in Action, Third Edition covers it

How deep it goes

Maps responsibility layers and configuration tasks, but stops short of detailed implementation procedures or command examples.

Examples

Uses Atlas settings for federation, LDAP, MFA, data residency, KMS or BYOK, connectivity, auditing filters, and backups.

What it assumes

Assumes a cloud-service context and distinguishes customer, MongoDB, and cloud-provider roles.

What you can do after

Operate/configure Atlas by assigning identity, data-access, network, encryption, auditing, and backup decisions to the correct party.

How it connects

Connects cloud computing, SaaS, identity management, MFA, encryption, network connectivity, auditing, backups, and authentication.

liveBookmanning.com

Read MongoDB 8.0 in Action, Third Edition on liveBook Get the book at manning.com

Also explained in

• 

  liveBookmanning.com
  Effective Platform EngineeringA shared responsibility model divides security responsibilities between a platform provider and the users of the platform.
• 

  liveBookmanning.com
  Data-Driven CybersecurityShared responsibility is an operating pattern in which a cloud provider secures the underlying infrastructure while the customer secures its data and workloads.
• 

  liveBookmanning.com
  Microsoft Azure in ActionThe shared responsibility model is a cloud security framework that assigns responsibility for different aspects of operating and securing a cloud environment between the provider and the customer.
• 

  liveBookmanning.com
  Azure SecurityShared responsibility is a division of accountability among multiple parties for managing and resolving a security outcome.
• 

  liveBookmanning.com
  Google Anthos in ActionA shared responsibility model is an operating model in which responsibility for infrastructure, platforms, applications, and data is divided among participating parties.

Compare how 6 books explain shared-responsibility model →

Related concepts

• cloud providercontrasts with · A cloud provider is an organization that delivers computing resources, platforms, or managed services over a network, typically on demand.
• Amazon Relational Database Service (RDS)used by · Amazon Relational Database Service is an AWS-managed service for deploying, operating, and scaling relational databases.
• software as a serviceuses · Software as a service is a software delivery model in which a provider hosts and operates applications that users access over a network.
• iaasuses · Infrastructure as a Service is a cloud service model that provides on-demand computing, storage, and networking resources while customers manage the operating systems and applications they run.
• platform as a serviceuses · Platform as a service (PaaS) is a cloud service model that provides a managed application development, deployment, or runtime platform while abstracting management of the underlying infrastructure.
• cloud computingconfigures · Cloud computing is the on-demand delivery of computing resources and services over a network from remotely managed infrastructure.

This explainer was generated by Manning's knowledge graph from the text of MongoDB 8.0 in Action, Third Edition. The section links point to the parts of the book it draws on.