Secure Prometheus Monitoring for MongoDB Atlas with AWS PrivateLink
November 19, 2025
What it is: A secure way for organizations to collect MongoDB Atlas metrics using Prometheus over AWS PrivateLink. This enhancement enables Prometheus collectors to scrape metrics from Atlas dedicated clusters entirely within the AWS network, thereby avoiding public internet exposure and improving operational reliability.
Who it’s for: Teams that rely on Prometheus for monitoring MongoDB Atlas deployments and need a secure, compliant, and controlled networking setup—especially those operating in AWS and with strong security or operational requirements.
Why it matters: Prometheus is central to many observability stacks; however, collecting metrics over the public internet or managing complex VPC peering creates significant security and operational challenges. AWS PrivateLink offers a private, isolated pathway for metric traffic, improving security, reducing network complexity, ensuring predictable performance, and supporting strict compliance requirements.
How to get started: Use the existing MongoDB Atlas PrivateLink endpoint, update your Prometheus scrape configuration with the PrivateLink discovery endpoint provided in the Atlas UI, and deploy regional scrapers if you operate multi-region clusters. Configuration can be managed through the Atlas UI, the Public API, or Terraform for IaC workflows.
Related Content
Secure Atlas Metrics with AWS PrivateLink for Prometheus
Integrate with Prometheus