Pull App Configuration Files
Download the current App configuration. You can choose to download in two different formats:
A compressed zip file that contains the configuration file directory. This is most useful when you're working with the CLI, a version control system, or another environment based on the file system.
A single JSON object that contains the entire configuration. This is most useful when you're working with the API or another environment that can parse JSON.
You specify which format to download by setting the Accept
header.
Path parameters
-
An Atlas Project/Group ID.
-
The ObjectID of your application. The App Services API Project and Application IDs section demonstrates how to find this value.
Responses
-
Pull successful
Hide response attributes Show response attributes object
-
The App's name.
provider_region
string Required One of: Values are
aws-us-east-1
,aws-us-west-2
,aws-us-east-2
,aws-eu-central-1
,aws-eu-west-1
,aws-eu-west-2
,aws-ap-southeast-1
,aws-ap-southeast-2
,aws-ap-south-1
, oraws-sa-east-1
.Values are
azure-eastus2
,azure-westus
,azure-westeurope
,azure-eastasia
, orazure-southeastasia
.Values are
gcp-us-central1
,gcp-us-east4
,gcp-us-west1
,gcp-europe-west1
, orgcp-asia-south1
.-
An application deployment model.
Values are
GLOBAL
orLOCAL
. -
The application's environment.
Values are
development
,testing
,qa
, orproduction
. -
Any of: Hide attributes Show attributes
-
The name of the authentication provider. For Anonymous authentication, this value is always
anon-user
.Value is
anon-user
. -
The name of the authentication provider. For Anonymous authentication, this value is always
anon-user
.Value is
anon-user
. -
If
true
, the auth provider is disabled. Users cannot log in through the provider until it is enabled.
Hide attributes Show attributes
-
The name of the authentication provider. For Email/Password authentication, this value is always
local-userpass
.Value is
local-userpass
. -
The name of the authentication provider. For Email/Password authentication, this value is always
local-userpass
.Value is
local-userpass
. -
If
true
, the auth provider is disabled. Users cannot log in through the provider until it is enabled. config
object One of: Hide attributes Show attributes
-
If
true
, automatically confirm new user accounts without additional verification.Value is
true
. -
The URL included in the email sent to users as part of the built-in password reset flow. The email also adds a unique password reset
token
andtokenId
as query parameters.This URL should handle user confirmation by passing the password reset token to a Realm SDK's
resetPassword
function. -
The subject line of the email sent to users as part of the built-in password reset flow.
Hide attributes Show attributes
-
If
true
, automatically confirm new user accounts without additional verification.Value is
true
. -
If
true
, use a custom function that you define to handle the password reset process.Value is
true
. -
The name of the custom function that handles the password reset process.
Hide attributes Show attributes
-
If
true
, automatically confirm new user accounts without additional verification. For built-in email account confirmation, set this value tofalse
.Value is
false
. -
The URL included in the email sent to new users as part of the built-in confirmation flow. The email also adds a unique confirmation
token
andtokenId
as query parameters.This URL should handle user confirmation by passing the confirmation token to a Realm SDK's
confirmUser
function or to the Admin API Confirm a Pending Email/Password User endpoint. -
The subject line of the email sent to new users as part of the built-in confirmation flow.
-
The URL included in the email sent to users as part of the built-in password reset flow. The email also adds a unique password reset
token
andtokenId
as query parameters.This URL should handle user confirmation by passing the password reset token to a Realm SDK's
resetPassword
function. -
The subject line of the email sent to users as part of the built-in password reset flow.
Hide attributes Show attributes
-
If
true
, automatically confirm new user accounts without additional verification. For built-in email account confirmation, set this value tofalse
.Value is
false
. -
The URL included in the email sent to new users as part of the built-in confirmation flow. The email also adds a unique confirmation
token
andtokenId
as query parameters.This URL should handle user confirmation by passing the confirmation token to a Realm SDK's
confirmUser
function or to the Admin API Confirm a Pending Email/Password User endpoint. -
The subject line of the email sent to new users as part of the built-in confirmation flow.
-
If
true
, use a custom function that you define to handle the password reset process.Value is
true
. -
The name of the custom function that handles the password reset process.
Hide attributes Show attributes
-
If
true
, automatically confirm new user accounts without additional verification. For custom function account confirmation, set this value tofalse
.Value is
false
. -
If
true
, new email/password user account registrations use a custom function that you define to handle the confirmation process. -
The name of the custom function that handles the confirmation process.
-
The URL included in the email sent to users as part of the built-in password reset flow. The email also adds a unique password reset
token
andtokenId
as query parameters.This URL should handle user confirmation by passing the password reset token to a Realm SDK's
resetPassword
function. -
The subject line of the email sent to users as part of the built-in password reset flow.
Hide attributes Show attributes
-
If
true
, automatically confirm new user accounts without additional verification. For custom function account confirmation, set this value tofalse
.Value is
false
. -
If
true
, new email/password user account registrations use a custom function that you define to handle the confirmation process. -
The name of the custom function that handles the confirmation process.
-
If
true
, use a custom function that you define to handle the password reset process.Value is
true
. -
The name of the custom function that handles the password reset process.
-
Hide attributes Show attributes
-
The name of the authentication provider. For API key authentication, this value is always
api-key
.Value is
api-key
. -
The name of the authentication provider. For API key authentication, this value is always
api-key
.Value is
api-key
. -
If
true
, the auth provider is disabled. Users cannot log in through the provider until it is enabled.
Hide attributes Show attributes
-
The name of the authentication provider. For Custom JWT authentication, this value is always
custom-token
.Value is
custom-token
. -
The name of the authentication provider. For Custom JWT authentication, this value is always
custom-token
.Value is
custom-token
. -
If
true
, the auth provider is disabled. Users cannot log in through the provider until it is enabled. -
A configuration object for the Custom JWT authentication provider.
Hide config attributes Show config attributes object
-
Defines the expected values of the
aud
claim in the external JWT. By default, the Custom JWT provider expectsaud
to be your App ID. -
If
false
, the external JWT must include all of the values defined inaudience
in itsaud
claim.If
true
, a JWT is valid if any of the values defined inaudience
are in itsaud
claim.Default value is
false
. -
The cryptographic method that the external system uses to sign the JWT. Custom JWT authentication supports JWTs signed using any of the following algorithms:
- HS256
- RS256
-
If
true
, the Custom JWT provider uses a signing algorithm and signing keys defined in a JSON Web Key (JWK) or JSON Web Key Set (JWKS). The JWK(S) must be accessible at the URL specified injwkURI
. -
A URL that hosts a JWK or JWKS that describes the signing method and signing keys the Custom JWT provider should use. The JWK(S) may specify up to three signing keys and must use the RS256 algorithm.
-
-
Hide secret_config attribute Show secret_config attribute object
-
A list of the names of up to three Secrets that each contain a signing key used by the external authentication system to sign JWTs. Each signing key Secret must be a string with length between 32 and 512 characters.
-
-
Metadata fields are additional data that describe each user. The value of each metadata field comes from some field included in the JWT from the external authentication system.
A user's metadata fields refresh whenever they log in.
A specific metadata field from the external JWT to include the user's data. This maps an external JWT field name (
name
) to the field name in the user's data (field_name
) that holds the value of that field.Hide metadata_fields attributes Show metadata_fields attributes object
-
If
true
, this value must always be present in the external JWT. -
The name of the field in the external JWT that contains the data.
To specify a field in an embedded object, use dot notation.
-
The name of the field in User object that holds the value.
-
Hide attributes Show attributes
-
The name of the authentication provider. For Custom Function authentication, this value is always
custom-function
.Value is
custom-function
. -
The name of the authentication provider. For Custom Function authentication, this value is always
custom-function
.Value is
custom-function
. -
If
true
, the auth provider is disabled. Users cannot log in through the provider until it is enabled. -
A configuration object for the Custom Function authentication provider.
Hide config attribute Show config attribute object
-
The name of the custom authentication function that handles user logins.
-
Hide attributes Show attributes
-
The name of the authentication provider. For Apple authentication, this value is always
oauth2-apple
.Value is
oauth2-apple
. -
The name of the authentication provider. For Apple authentication, this value is always
oauth2-apple
.Value is
oauth2-apple
. -
If
true
, the auth provider is disabled. Users cannot log in through the provider until it is enabled. -
A configuration object for the Apple authentication provider.
Hide config attribute Show config attribute object
-
Your Apple Services ID.
To learn how to get this, see Create a Services ID.
-
-
Hide secret_config attribute Show secret_config attribute object
-
The name of a Secret that holds your client secret JWT.
To learn how to create this, see Create the Client Secret JWT.
-
-
A list of URIs that the OAuth flow should allow the user to redirect to.
Hide attributes Show attributes
-
The name of the authentication provider. For Google authentication, this value is always
oauth2-google
.Value is
oauth2-google
. -
The name of the authentication provider. For Google authentication, this value is always
oauth2-google
.Value is
oauth2-google
. -
If
true
, the auth provider is disabled. Users cannot log in through the provider until it is enabled. -
A configuration object for the Google authentication provider.
Hide config attributes Show config attributes object
-
An OAuth 2.0 Client ID for your GCP project.
To learn how to create one, see Set Up a Project in the Google API Console.
-
An OAuth 2.0
-
-
Hide secret_config attribute Show secret_config attribute object
-
The name of a Secret that holds the OAuth 2.0 Client Secret for the Client ID specified in
config.clientId
.
-
-
A list of URIs that the OAuth flow should allow the user to redirect to.
-
Metadata fields are additional data that describe each user. The value of each metadata field comes from Google and is included in the authenticated JWT.
A user's metadata fields refresh whenever they log in.
-
A list of approved domain names for user accounts. If this is defined, a user must have an email address associated with their OAuth profile that has a domain included in this list.
Hide attributes Show attributes
-
The name of the authentication provider. For Facebook authentication, this value is always
oauth2-facebook
.Value is
oauth2-facebook
. -
The name of the authentication provider. For Facebook authentication, this value is always
oauth2-facebook
.Value is
oauth2-facebook
. -
If
true
, the auth provider is disabled. Users cannot log in through the provider until it is enabled. -
A configuration object for the Facebook authentication provider.
-
Hide secret_config attribute Show secret_config attribute object
-
The name of a Secret that holds your Facebook App Secret.
-
-
A list of URIs that the OAuth flow should allow the user to redirect to.
-
Metadata fields are additional data that describe each user. The value of each metadata field comes from Facebook and is included in the authenticated JWT.
A user's metadata fields refresh whenever they log in.
-
A list of approved domain names for user accounts. If this is defined, a user must have an email address associated with their OAuth profile that has a domain included in this list.
-
-
Hide custom_user_data attributes Show custom_user_data attributes object | null
-
The name of the database that contains custom user data.
-
The name of the collection that contains custom user data.
-
The name of a field that appears in every custom user data document and that contains the user account ID of each document's corresponding user.
-
If
true
, custom user data is enabled. -
The name of the linked MongoDB data source that contains custom user data.
-
The name of a user creation function that runs whenever a new user registers.
-
-
Hide data_api_config attributes Show data_api_config attributes object | null
-
A supported version of the Data API.
Value is
v1
. -
A data format supported by the Data API & custom endpoints.
Values are
JSON
orEJSON
. -
An application user's account ID. If defined, endpoints will always run as the specified user.
-
Stringified source code for a function that returns an application user's account ID. If defined, endpoints execute the function on every request and run as the user with the ID returned from the function.
-
Values are
NO_VALIDATION
,SECRET_AS_QUERY_PARAM
, orVERIFY_PAYLOAD
. -
If
validation_method
is set to"SECRET_AS_QUERY_PARAM"
or"VERIFY_PAYLOAD"
, this is thename
of the Secret that authorizes requests. -
A JSON expression that evaluates to
true
if an endpoint is allowed to run in response to an incoming request.
-
One of: Hide attributes Show attributes
-
The service name.
-
The type of service.
-
Hide config attributes Show config attributes object
-
The cluster name of the data source within. The name may be at most 64 characters long and must only contain ASCII letters, numbers, underscores, and hyphens.
-
The read preference mode for read requests to the data source.
Values are
primary
,primaryPreferred
,secondary
,secondaryPreferred
, ornearest
. -
Target read operations to specific members of a replica set.
Values are
server1
orserver2
. -
If true, clients may connect to the app over the MongoDB Wire Protocol.
-
-
A data access rule that define defines fallback user roles and query filters for collection's that don't have more specific permissions defined.
Hide default_rule attributes Show default_rule attributes object
-
An ordered list of default user roles.
Hide roles attributes Show roles attributes object
-
Hide document_filters attributes Show document_filters attributes object
-
The role's name.
-
An object that maps document field names to read and write permissions for the field and its children.
-
Read and write permissions for a field.
Hide additional_fields attributes Show additional_fields attributes object
-
-
A list of default query filters.
A filter that conditionally modifies incoming query operations before they run.
Hide filters attributes Show filters attributes object
-
The filter's name.
-
A MongoDB query object.
-
A MongoDB projection object.
-
-
-
A data access rule that defines user roles and query filters for a collection in a linked data source.
Hide rules attributes Show rules attributes object
-
The name of a database in the linked data source.
-
The name of a collection in the specified
database
. -
A list of data access roles.
Hide roles attributes Show roles attributes object
-
Hide document_filters attributes Show document_filters attributes object
-
The role's name.
-
An object that maps document field names to read and write permissions for the field and its children.
-
Read and write permissions for a field.
Hide additional_fields attributes Show additional_fields attributes object
-
-
A list of filters for incoming operations.
A filter that conditionally modifies incoming query operations before they run.
Hide filters attributes Show filters attributes object
-
The filter's name.
-
A MongoDB query object.
-
A MongoDB projection object.
-
-
Hide attributes Show attributes
-
Value is
mongodb-datafederation
. -
Value is
datalake
.
-
-
Hide endpoints attributes Show endpoints attributes object
-
Values are
GET
,POST
,PUT
,PATCH
,DELETE
, or*
. -
Values are
NO_VALIDATION
,SECRET_AS_QUERY_PARAM
, orVERIFY_PAYLOAD
. -
If
validation_method
is set to"SECRET_AS_QUERY_PARAM"
or"VERIFY_PAYLOAD"
, this is the_id
of the Secret that authorizes requests. -
A data format supported by the Data API & custom endpoints.
Values are
JSON
orEJSON
. -
The endpoint functions's name.
-
Hide environments attribute Show environments attribute object
-
An object that maps each possible environment name to definitions of the environment values available in that environment.
Hide values attributes Show values attributes object
-
-
Hide functions attributes Show functions attributes object
-
A JSON expression that evaluates to
true
if the Function is allowed to run in response to an incoming request. -
A unique name for the Function.
-
If
true
, the function is hidden from client applications. You can still call a private function from JSON expressions and other functions, including incoming webhooks and triggers. -
The stringified source code for the function. The code must be valid ES6.
-
If
true
, the function executes with full privileges, bypassing rules on all services. -
An application user's account ID. If defined, endpoints will always run as the specified user. Cannot be used with
run_as_user_id_script_source
. -
The stringified source code for a function that returns an application user's account ID. If defined, endpoints execute the function on every request and run as the user with the ID returned from the function. Cannot be used with
run_as_user_id
.
-
-
Hide graphql attributes Show graphql attributes object
-
Hide config attributes Show config attributes object
-
If
true
, generated schema type names use common English pluralization whenever possible.If
false
, or if a natural pluralization cannot be determined, then plural types use the singular type name with an"s"
appended to the end.You cannot change this value after you create your App. This value is
true
for all new Apps. -
If
true
, the GraphQL API blocks introspection queries from clients.
-
-
Hide validation_settings attributes Show validation_settings attributes object
-
Hide custom_resolvers attributes Show custom_resolvers attributes object
-
The name of the resolver's parent type. This can be
"Query"
,"Mutation"
, or the name of a generated type if this is a computed property. -
The name of the custom resolver field that appears in the GraphQL schema.
-
The kind of input type the custom resolver uses. This value must agree with the value of
input_type
:- A scalar input type must use
"scalar"
or"scalar-list"
- A generated input type must use
"generated"
or"generated-list"
- A custom input type must use
"custom"
If undefined, the resolver does not accept an input.
Values are
scalar
,scalar-list
,generated
,generated-list
, orcustom
. - A scalar input type must use
-
The kind of payload type the custom resolver uses. This value must agree with the value of
payload_type
:- A scalar payload type must use
"scalar"
or"scalar-list"
- A generated payload type must use
"generated"
or"generated-list"
- A custom payload type must use
"custom"
If undefined, the resolver returns a
DefaultPayload
object.Values are
scalar
,scalar-list
,generated
,generated-list
, orcustom
. - A scalar payload type must use
-
The resolver function's name.
-
-
-
[Deprecated] A list of legacy HTTP services. This is for backwards compatibility only.
Hide https_endpoints attributes Show https_endpoints attributes object
-
The service name.
-
The type of service.
Values are
aws
,twilio
,github
,gcm
, orhttp
.
-
-
Hide log_forwarders attributes Show log_forwarders attributes object
-
Values are
auth
,endpoint
,function
,graphql
,push
,schema
,service
,sync
,trigger
, ortrigger_error_handler
. -
Values are
error
orsuccess
.
-
Hide schemas attributes Show schemas attributes object
-
Metadata that describes which linked collection the schema applies to.
-
A valid schema for the collection.
Hide schema attributes Show schema attributes object
-
The BSON type of the field.
Values are
object
,array
,string
,number
,int
,long
,double
,decimal
,date
,timestamp
,bool
,null
,regex
,objectId
,binary
,uuid
,function
,javascript
,symbol
,minKey
, ormaxKey
. -
A human-readable title for the schema.
-
For
object
schemas, an array of field names that are required in instances of the object. -
An object where each field name is a property in the schema. The corresponding value is a schema definition for that field.
Hide properties attribute Show properties attribute object
-
A valid schema for the collection.
-
-
-
Relationships to foreign collections. Each field name is a property in the schema. The corresponding value is a relationship definition for that field.
Hide relationships attribute Show relationships attribute object
-
A relationship definition.
Hide * attributes Show * attributes object
-
A reference string for the foreign collection.
-
The name of the field in the foreign collection that the relationship points to.
-
If
true
:- the relationship may point to many foreign documents.
- the local field must be defined as an array in the collection schema.
-
-
-
-
[Deprecated] A list of legacy third-party non-HTTP services. This is for backwards compatibility only.
Hide services attributes Show services attributes object
-
The service name.
-
The type of service.
Values are
aws
,twilio
,github
,gcm
, orhttp
.
-
-
Hide sync attributes Show sync attributes object
-
The state of the sync service (
"enabled"
,"disabled"
, or empty if Sync is not configured). -
The name of a database in the synced cluster where App Services stores data in Development Mode. App Services automatically generates a schema for each synced type and maps each object type to a collection within the database.
-
An array of queryable field names on any collection.
-
A list of field names to use as the indexed queryable field. Although this property is an array, Sync currently supports only one indexed queryable field. Therefore, this array may contain at most one element.
The indexed queryable field must be present in the schema and be the same eligible field type in every collection you sync. The indexed queryable field name must also appear in
queryable_fields_names
since this is a global queryable field. -
An array of queryable field names on the specified collection.
-
Deprecated
-
The last time Sync was disabled, represented by the number of seconds since the UNIX epoch.
-
The number of days the client can be offline before a client reset is required.
-
Specifies whether the client reset mode is disabled. By default, client reset mode is enabled and this value is
false
. -
An array of the names of collections that are defined as asymmetric with Data Ingest, where clients can write data but not read.
-
-
One of: Hide attributes Show attributes
-
The trigger's name.
-
The trigger type. For database triggers, this value is always
"DATABASE"
.Value is
DATABASE
. -
If
true
, the trigger is disabled and does not listen for events or execute.Default value is
false
. -
An object that defines configuration values for the trigger.
Hide config attributes Show config attributes object
-
The
_id
value of a linked MongoDB data source that contains the watched collection.You can list services with the Get all services endpoint.
Data sources are services whose
type
is "mongodb-atlas". Use the_id
value for the data source you want to link to the Trigger. -
The name of a database in the linked data source. If you omit this parameter, the Source Type changes to "Deployment." However, shared tier infrastructure does not support deployment changestreams. If you omit the 'database' parameter, you receive the 'deployment changestreams are not supported on shared tier clusters' error. Supply the database parameter to resolve this error.
-
The name of a collection in the specified database. The trigger listens to events from this collection. If you omit this parameter, the Source Type changes to "Database."
-
The types of MongoDB change event that the trigger listens for.
Valid operation types for all triggers include:
"INSERT"
"UPDATE"
"REPLACE"
"DELETE"
Additional valid operation types for database and deployment triggers include:
"CREATE_COLLECTION"
"MODIFY_COLLECTION"
"RENAME_COLLECTION"
"DROP_COLLECTION"
"SHARD_COLLECTION"
"RESHARD_COLLECTION"
"REFINE_COLLECTION_SHARD_KEY"
Additional valid operation types for deployment triggers include:
"DROP_DATABASE"
For more information, refer to Trigger Configuration.
At least
1
element. -
A $match expression filters change events. The trigger will only fire if the expression evaluates to true for a given change event.
-
A $project expression returns only the specified fields. You can include or exclude specific fields, or include newly-computed fields.
-
If
true
, indicates thatUPDATE
change events should include the most current majority-committed version of the modified document in thefullDocument
field.Default value is
false
. -
If true, indicates that
UPDATE
change events should include a snapshot of the modified document from immediately before the update was applied.You must enable document preimages for your cluster to include these snapshots.
Default value is
false
. -
If
true
, enabling the Trigger after it was disabled will not invoke events that occurred while the Trigger was disabled.Default value is
false
. -
If
true
, when this Trigger's resume token cannot be found in the cluster's oplog, the Trigger automatically resumes processing events at the next relevant change stream event. All change stream events from when the Trigger was suspended until the Trigger resumes execution do not have the Trigger fire for them.Default value is
false
. -
If
true
, the trigger will use the maximize throughput option.Default value is
false
. -
If
true
, event ordering is disabled and this Trigger can process events in parallel. Iffalse
, event ordering is enabled and the Trigger executes events serially.Default value is
false
.
-
-
The ID of the function that the trigger calls when it fires.
This value is the same as
event_processors.FUNCTION.function_id
. You can either define the value here or inevent_processors.FUNCTION.function_id
. The App Services backend duplicates the value to the configuration location where you did not define it.For example, if you define
function_id
, the backend duplicates it toevent_processors.FUNCTION.function_id
.If you define
function_id
,event_processors
is not required. You must provide eitherfunction_id
orevent_processors
when updating a trigger. -
The name of the function that the trigger calls when it fires, i.e. the function described by
function_id
.This value is the same as
event_processors.FUNCTION.function_name
. You can either define the value here or inevent_processors.FUNCTION.function_name
. The App Services backend duplicates the value to the configuration location where you did not define it.For example, if you define
function_name
, the backend duplicates it toevent_processors.FUNCTION.function_name
.If you define
function_name
,event_processors
is not required. You must provide eitherfunction_name
orevent_processors
when updating a trigger. -
An object where each field name is an event processor ID and each value is an object that configures its corresponding event processor. For an example configuration object, see Send Trigger Events to AWS EventBridge.
Hide event_processors attributes Show event_processors attributes object
-
Hide FUNCTION attribute Show FUNCTION attribute object
-
Hide config attributes Show config attributes object
-
The ID of the function that the trigger calls when it fires.
This value is the same as the root-level
function_id
. You can either define the value here or infunction_id
. The App Services backend duplicates the value to the configuration location where you did not define it.For example, if you define
event_processors.FUNCTION.function_id
, the backend duplicates it tofunction_id
.If you define
function_id
,event_processors
is not required. You must provide eitherfunction_id
orevent_processors
when updating a trigger. -
The name of the function that the trigger calls when it fires, i.e. the function described by
function_id
.This value is the same as the root-level
function_name
. You can either define the value here or infunction_name
. The App Services backend duplicates the value to the configuration location where you did not define it.For example, if you define
event_processors.FUNCTION.function_name
, the backend duplicates it tofunction_name
.If you define
function_name
,event_processors
is not required. You must provide eitherfunction_name
orevent_processors
when updating a trigger.
-
-
-
Hide AWS_EVENTBRIDGE attribute Show AWS_EVENTBRIDGE attribute object
-
-
An object that defines custom error handling for an AWS EventBridge trigger. Valid only for
"DATABASE"
type triggers with"AWS_EVENTBRIDGE"
event processors.Hide error_handler attribute Show error_handler attribute object
Hide attributes Show attributes
-
The trigger's name.
-
The trigger type. For authentication triggers, this value is always
"AUTHENTICATION"
.Value is
AUTHENTICATION
. -
If
true
, the trigger is disabled and does not listen for events or execute.Default value is
false
. -
An object that defines configuration values for the trigger.
Hide config attributes Show config attributes object
-
The type of authentication event that the trigger listens for.
Values are
LOGIN
,CREATE
, orDELETE
. -
The type(s) of authentication provider that the trigger listens to.
Values are
anon-user
,api-key
,custom-token
,custom-function
,local-userpass
,oauth2-apple
,oauth2-facebook
, oroauth2-google
.
-
-
The ID of the function that the trigger calls when it fires.
This value is the same as
event_processors.FUNCTION.function_id
. You can either define the value here or inevent_processors.FUNCTION.function_id
. The App Services backend duplicates the value to the configuration location where you did not define it.For example, if you define
function_id
, the backend duplicates it toevent_processors.FUNCTION.function_id
.If you define
function_id
,event_processors
is not required. You must provide eitherfunction_id
orevent_processors
when updating a trigger. -
The name of the function that the trigger calls when it fires, i.e. the function described by
function_id
.This value is the same as
event_processors.FUNCTION.function_name
. You can either define the value here or inevent_processors.FUNCTION.function_name
. The App Services backend duplicates the value to the configuration location where you did not define it.For example, if you define
function_name
, the backend duplicates it toevent_processors.FUNCTION.function_name
.If you define
function_name
,event_processors
is not required. You must provide eitherfunction_name
orevent_processors
when updating a trigger. -
An object where each field name is an event processor ID and each value is an object that configures its corresponding event processor. For an example configuration object, see Send Trigger Events to AWS EventBridge.
Hide event_processors attributes Show event_processors attributes object
-
Hide FUNCTION attribute Show FUNCTION attribute object
-
Hide config attributes Show config attributes object
-
The ID of the function that the trigger calls when it fires.
This value is the same as the root-level
function_id
. You can either define the value here or infunction_id
. The App Services backend duplicates the value to the configuration location where you did not define it.For example, if you define
event_processors.FUNCTION.function_id
, the backend duplicates it tofunction_id
.If you define
function_id
,event_processors
is not required. You must provide eitherfunction_id
orevent_processors
when updating a trigger. -
The name of the function that the trigger calls when it fires, i.e. the function described by
function_id
.This value is the same as the root-level
function_name
. You can either define the value here or infunction_name
. The App Services backend duplicates the value to the configuration location where you did not define it.For example, if you define
event_processors.FUNCTION.function_name
, the backend duplicates it tofunction_name
.If you define
function_name
,event_processors
is not required. You must provide eitherfunction_name
orevent_processors
when updating a trigger.
-
-
-
Hide AWS_EVENTBRIDGE attribute Show AWS_EVENTBRIDGE attribute object
-
Hide attributes Show attributes
-
The trigger's name.
-
The trigger type. For scheduled triggers, this value is always
"SCHEDULED"
.Value is
SCHEDULED
. -
If
true
, the trigger is disabled and does not listen for events or execute.Default value is
false
. -
An object that defines configuration values for the trigger.
Hide config attributes Show config attributes object
-
A cron expression that specifies when the trigger executes.
-
If
true
, enabling the trigger after it was disabled will not invoke events that occurred while the trigger was disabled.
-
-
The ID of the function that the trigger calls when it fires.
This value is the same as
event_processors.FUNCTION.function_id
. You can either define the value here or inevent_processors.FUNCTION.function_id
. The App Services backend duplicates the value to the configuration location where you did not define it.For example, if you define
function_id
, the backend duplicates it toevent_processors.FUNCTION.function_id
.If you define
function_id
,event_processors
is not required. You must provide eitherfunction_id
orevent_processors
when updating a trigger. -
The name of the function that the trigger calls when it fires, i.e. the function described by
function_id
.This value is the same as
event_processors.FUNCTION.function_name
. You can either define the value here or inevent_processors.FUNCTION.function_name
. The App Services backend duplicates the value to the configuration location where you did not define it.For example, if you define
function_name
, the backend duplicates it toevent_processors.FUNCTION.function_name
.If you define
function_name
,event_processors
is not required. You must provide eitherfunction_name
orevent_processors
when updating a trigger. -
An object where each field name is an event processor ID and each value is an object that configures its corresponding event processor. For an example configuration object, see Send Trigger Events to AWS EventBridge.
Hide event_processors attributes Show event_processors attributes object
-
Hide FUNCTION attribute Show FUNCTION attribute object
-
Hide config attributes Show config attributes object
-
The ID of the function that the trigger calls when it fires.
This value is the same as the root-level
function_id
. You can either define the value here or infunction_id
. The App Services backend duplicates the value to the configuration location where you did not define it.For example, if you define
event_processors.FUNCTION.function_id
, the backend duplicates it tofunction_id
.If you define
function_id
,event_processors
is not required. You must provide eitherfunction_id
orevent_processors
when updating a trigger. -
The name of the function that the trigger calls when it fires, i.e. the function described by
function_id
.This value is the same as the root-level
function_name
. You can either define the value here or infunction_name
. The App Services backend duplicates the value to the configuration location where you did not define it.For example, if you define
event_processors.FUNCTION.function_name
, the backend duplicates it tofunction_name
.If you define
function_name
,event_processors
is not required. You must provide eitherfunction_name
orevent_processors
when updating a trigger.
-
-
-
Hide AWS_EVENTBRIDGE attribute Show AWS_EVENTBRIDGE attribute object
-
-
-
Hide values attributes Show values attributes object
-
If
true
, the value is a reference by name to a Secret.
A zip file containing the App configuration file directory
-
-
Invalid request
-
Error pulling configuration
curl \
--request GET 'https://services.cloud.mongodb.com/api/admin/v3.0/groups/{groupId}/apps/{appId}/pull' \
--header "Authorization: Bearer $ACCESS_TOKEN"
{
"name": "string",
"provider_region": "aws-us-east-1",
"deployment_model": "GLOBAL",
"environment": "production",
"auth_providers": [
{
"name": "anon-user",
"type": "anon-user",
"disabled": true
}
],
"custom_user_data": {
"database_name": "myapp",
"collection_name": "users",
"user_id_field": "user_account_id",
"enabled": true,
"mongo_service_name": "mongodb-atlas",
"on_user_creation_function_name": "myFunction"
},
"data_api_config": {
"disabled": true,
"versions": [
"v1"
],
"return_type": "JSON",
"create_user_on_auth": true,
"run_as_user_id": "string",
"run_as_user_id_script_source": "string",
"validation_method": "NO_VALIDATION",
"secret_name": "string",
"can_evaluate": {}
},
"data_sources": [
{
"name": "string",
"type": "string",
"config": {
"clusterName": "Cluster0",
"readPreference": "primary",
"readPreferenceTagSets": [
"server1"
],
"wireProtocolEnabled": true
},
"default_rule": {
"roles": [
{
"document_filters": {
"read": {},
"write": {}
},
"name": "string",
"apply_when": {},
"read": {},
"write": {},
"insert": {},
"delete": {},
"search": {},
"fields": {},
"additional_fields": {
"read": {},
"write": {}
}
}
],
"filters": [
{
"name": "string",
"apply_when": {},
"query": {},
"projection": {
"additionalProperty1": 0,
"additionalProperty2": 0
}
}
]
},
"rules": [
{
"database": "string",
"collection": "string",
"roles": [
{
"document_filters": {
"read": {},
"write": {}
},
"name": "string",
"apply_when": {},
"read": {},
"write": {},
"insert": {},
"delete": {},
"search": {},
"fields": {},
"additional_fields": {
"read": {},
"write": {}
}
}
],
"filters": [
{
"name": "string",
"apply_when": {},
"query": {},
"projection": {
"additionalProperty1": 0,
"additionalProperty2": 0
}
}
]
}
]
}
],
"endpoints": [
{
"route": "string",
"http_method": "GET",
"function_id": "string",
"validation_method": "NO_VALIDATION",
"secret_id": "string",
"return_type": "JSON",
"respond_result": true,
"fetch_custom_user_data": true,
"create_user_on_auth": true,
"disabled": true,
"function_name": "string"
}
],
"environments": {
"values": {
"none": {
"values": {}
},
"development": {
"values": {}
},
"testing": {
"values": {}
},
"qa": {
"values": {}
},
"production": {
"values": {}
}
}
},
"functions": [
{
"can_evaluate": {},
"name": "string",
"private": true,
"source": "string",
"run_as_system": true,
"run_as_user_id": "string",
"run_as_user_id_script_source": "string"
}
],
"graphql": {
"config": {
"use_natural_pluralization": true,
"disable_schema_introspection": true
},
"validation_settings": {
"read_validation_action": "ERROR",
"read_validation_level": "STRICT",
"write_validation_action": "ERROR",
"write_validation_level": "STRICT"
},
"custom_resolvers": [
{
"on_type": "string",
"field_name": "string",
"input_type": "string",
"input_type_format": "scalar",
"payload_type": "string",
"payload_type_format": "scalar",
"function_name": "string"
}
]
},
"hosting": {
"enabled": true,
"custom_domain": "example.com",
"default_error_path": "/404.html",
"default_error_code": "404"
},
"https_endpoints": [
{
"name": "string",
"type": "aws",
"incoming_webhooks": [
{
"name": "string",
"function_source": "string",
"respond_result": true,
"options": {
"secret": "string",
"secretAsQueryParam": true
}
}
],
"version": 42
}
],
"log_forwarders": [
{
"name": "string",
"disabled": true,
"log_types": [
"auth"
],
"log_statuses": [
"error"
],
"policy": {
"type": "single"
},
"action": {
"type": "collection",
"name": "string",
"data_source": "string",
"database": "string",
"collection": "string"
}
}
],
"schemas": [
{
"metadata": {
"data_source": "string",
"database": "string",
"collection": "string"
},
"schema": {
"bsonType": "object",
"title": "string",
"required": [
"string"
],
"properties": {
"*": {}
}
},
"relationships": {
"additionalProperty1": {
"ref": "string",
"foreign_key": "string",
"is_list": true
},
"additionalProperty2": {
"ref": "string",
"foreign_key": "string",
"is_list": true
}
}
}
],
"services": [
{
"name": "string",
"type": "aws",
"incoming_webhooks": [
{
"name": "string",
"function_source": "string",
"respond_result": true,
"options": {
"secret": "string",
"secretAsQueryParam": true
}
}
],
"version": 42
}
],
"sync": {
"state": "string",
"database_name": "string",
"queryable_fields_names": [
"string"
],
"indexed_queryable_fields_names": [
"string"
],
"collection_queryable_fields_names": {
"additionalProperty1": {
"additionalProperty1": "string",
"additionalProperty2": "string"
},
"additionalProperty2": {
"additionalProperty1": "string",
"additionalProperty2": "string"
}
},
"permissions": {},
"last_disabled": "string",
"client_max_offline_days": 42,
"is_recovery_mode_disabled": true,
"asymmetric_tables": [
"string"
]
},
"triggers": [
{
"name": "onNewEmployee",
"type": "DATABASE",
"config": {
"match": {},
"project": {},
"database": "HR",
"collection": "employees",
"service_id": "5adeb649b8b998486770ae7c",
"full_document": true,
"operation_types": [
"INSERT"
]
},
"function_id": "5eea9ca4ca0e356e2c2a148a",
"event_processors": {
"FUNCTION": {
"config": {
"function_id": "6841b8d3e71dc81bed89dbba",
"function_name": "Atlas_Triggers_DatabaseInsert_1749137618"
}
}
}
}
],
"values": [
{
"name": "string",
"private": true,
"from_secret": true
}
]
}