What it is: Atlas now supports secretless authentication for Azure Key Vault (AKV) Encryption at Rest (EAR) using an Atlas-managed Azure Service Principal. This capability allows Atlas to authenticate via the Cloud Provider Access framework without requiring users to store static, long-lived Azure credentials within the database platform.

Who it’s for: Security administrators and platform engineers managing MongoDB Atlas on Azure who need to enforce strict identity management and secret rotation policies.

Why it matters: Removing static credentials shifts access control responsibilities to Azure Role Based Access Control (RBAC), reducing the operational overhead and security risk associated with manually managing secrets. The addition of unversioned Key Vault key URI support further simplifies operations by automatically resolving to the latest key version during rotation.

How to get started:  Click the documentation link below for a step-by-step guide on how to get started with secretless authentication for Azure Key Vault in Atlas.