Detections
Analytics
CIS MongoDB 3.4 Database Audit L2 v1.0.0
Audit Details
Name: CIS MongoDB 3.4 Database Audit L2 v1.0.0
Updated: 3/7/2023
Authority: CIS
Plugin: MongoDB
Revision: 1.10
Estimated Item Count: 9
File Details
Filename: CIS_MongoDB_3.4_Benchmark_Level_2_DB_v1.0.0.audit
Size: 18.3 kB
MD5: 6c4bf7d0ada46b56c01cd660bacaa479
SHA256: 0587848222475057fc865c4a92bf9f1347b92e75b06cfbc6052eb7eb9dd7c19d
Audit Items
| Description | Categories |
|---|---|
| 3.4 Ensure that each role for each MongoDB database is needed and grants only the necessary privileges | ACCESS CONTROL |
| 3.5 Review User-Defined Roles | ACCESS CONTROL |
| 3.6 Review Superuser/Admin Roles - clusterAdmin | ACCESS CONTROL |
| 3.6 Review Superuser/Admin Roles - dbAdminAnyDatabase | ACCESS CONTROL |
| 3.6 Review Superuser/Admin Roles - dbOwner | ACCESS CONTROL |
| 3.6 Review Superuser/Admin Roles - hostManager | ACCESS CONTROL |
| 3.6 Review Superuser/Admin Roles - readWriteAnyDatabase | ACCESS CONTROL |
| 3.6 Review Superuser/Admin Roles - userAdmin | ACCESS CONTROL |
| 3.6 Review Superuser/Admin Roles - userAdminAnyDatabase | ACCESS CONTROL |