MONGODB AT AWS RE:INVENT 2019

Thank you for attending our talk!

Find out more below about how to run MongoDB securely on AWS using field level encryption

Global Data Privacy: GDPR, CCPA, and Beyond

New data privacy regulations such as GDPR and CCPA are changing the data management landscape. Download the whitepaper to learn how we can help you get ready.

Read the Docs

The official MongoDB 4.2-compatible drivers provide a client-side field level encryption framework. Applications can encrypt fields in documents prior to transmitting data over the wire to the server.

Claim your $300 in Atlas credits

MongoDB Atlas is the global cloud database service for modern applications. Deploy fully managed MongoDB across AWS, Azure, or GCP.

Get started - Code: reInvent19 →

Get started in 5 steps.

Create master key with minimal permissions.

Create IAM role(s).

Assign master key roles to service accounts

Configure the app to use the master key.

Encrypt sensitive fields inside the app.

Or use our complete quickstart guide.

Review the slides here →

Want to check out the handout?

MongoDB’s Client-Side Field Level Encryption

The fundamental challenge is protecting the confidentiality of data while it’s in use.

Data is encrypted before it ever reaches the network.

Client-Side Field Level Encryption natively integrates with Amazon KMS to allow users to encrypt fields in documents prior to transmitting data to the database inside MongoDB Atlas. Only applications with access to both the proper credentials and the correct encryption keys can decrypt and read the protected data.

Easy to use
Encryption as a first-class citizen
Modern, authenticated encryption algorithms
Customer-managed keys
All major hardware, operating systems

Use Cases

Private user information (PII)

Medical records (HIPAA)

Financial data (FMA/GLB)

Credit card details (PCI/DSS)

Claim your $300 in Atlas credits with the code: reInvent19 →