MongoDB Atlas cloud connection

Atlas connections use project API keys (not IAM). Ductape manages project network access and links Atlas clusters.

Setup checklist

1. Atlas → Project Settings → copy Project ID (24-character hex).
2. Security → Project Identity & Access → Applications → API Keys.
3. Create API key with Project Owner under Project permissions.
4. Copy public key and private key (private key shown once).
5. Workbench → Cloud → Add Atlas connection with tag e.g. prod_atlas.
6. After activation, under Private access, add Ductape proxy IPs to Atlas Network Access (or sync from Workbench).

SDK lifecycle

TypeScript

await ductape.cloud.connections.create({
  provider: 'mongodb_atlas',
  name: 'prod_atlas',
  scopes: ['database'],
});

await ductape.cloud.connections.complete('prod_atlas', {
  project_id: '5c843ba379358e5b3dc2dec6',
  atlas_public_key: 'awqxqtif',
  atlas_private_key: 'your-private-key',
});

await ductape.cloud.connections.validate('prod_atlas');

Java

ductape.cloud.connections.create(Map.of(
  "provider", "mongodb_atlas",
  "name", "prod_atlas",
  scopes: ['database'],
));

ductape.cloud.connections.complete('prod_atlas', Map.of(
  "project_id", "5c843ba379358e5b3dc2dec6",
  "atlas_public_key", "awqxqtif",
  "atlas_private_key", "your-private-key",
));

ductape.cloud.connections.validate('prod_atlas');

Go

client.cloud.connections.create({
  "provider": "mongodb_atlas",
  "name": "prod_atlas",
  scopes: ['database'],
});

client.cloud.connections.complete('prod_atlas', {
  "project_id": "5c843ba379358e5b3dc2dec6",
  "atlas_public_key": "awqxqtif",
  "atlas_private_key": "your-private-key",
});

client.cloud.connections.validate('prod_atlas');

.NET

await ductape.cloud.connections.create({
  ["provider"] = "mongodb_atlas",
  ["name"] = "prod_atlas",
  scopes: ['database'],
});

await ductape.cloud.connections.complete('prod_atlas', {
  ["project_id"] = "5c843ba379358e5b3dc2dec6",
  ["atlas_public_key"] = "awqxqtif",
  ["atlas_private_key"] = "your-private-key",
});

await ductape.cloud.connections.validate('prod_atlas');

Linked services

service	Component type
atlas-cluster	Databases (MongoDB)

Import an existing cluster:

TypeScript

const result = await ductape.cloud.resources.import({
  cloud: 'prod_atlas',
  service: 'atlas-cluster',
  type: 'databases',
  product: 'my-product',
  component: 'db-mongo',
  env: 'prd',
  resource: 'cluster-name',
});

Java

Map<String, Object> result = ductape.cloud.resources.import(Map.of(
  "cloud", "prod_atlas",
  "service", "atlas-cluster",
  "type", "databases",
  "product", "my-product",
  "component", "db-mongo",
  "env", "prd",
  "resource", "cluster-name",
));

Go

result := client.cloud.resources.import({
  "cloud": "prod_atlas",
  "service": "atlas-cluster",
  "type": "databases",
  "product": "my-product",
  "component": "db-mongo",
  "env": "prd",
  "resource": "cluster-name",
});

.NET

var result = await ductape.cloud.resources.import({
  ["cloud"] = "prod_atlas",
  ["service"] = "atlas-cluster",
  ["type"] = "databases",
  ["product"] = "my-product",
  ["component"] = "db-mongo",
  ["env"] = "prd",
  ["resource"] = "cluster-name",
});

Ductape stores the connection string as a workspace secret on the component env.