Details
-
Bug
-
Resolution: Done
-
Major - P3
-
None
-
None
-
*Location*: https://docs.mms.mongodb.com/core/security/
*User-Agent*: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/38.0.2125.101 Safari/537.36
*Screen Resolution*: 1920 x 1080
*repo*: REPONAME
*source*: core/security
Description
We say "Additionally, the Automation Agents require outbound access on port 443 to download MongoDB binaires from the fastdl.mongodb.org domain, provided by Amazon Cloudfront. The IP ranges for Cloudfront change frequently. See the current list of IP ranges for Cloudfront."
1) small typo ("binaires")
2) While fastdl.mongodb.org serves the community build versions, for Automation of the Enterprise build, the Automation agent separately needs to have access to downloads.mongodb.com in order to be able to download those binaries
3) We should mention that there is separately the option of adding a "Custom Build" within the "Version Manager" where the Custom Build simply must be available at a URL accessible to the Automation agent (meaning it could, for example, be served by a web server running inside a user's isolated network environment). The custom build's "Git Version" field must be set to the output of whatever comes from running mongod --version on the target binary.
4) We should also mention that you need outbound access to the Backup and Monitoring agent binaries, to be downloaded:
https://s3.amazonaws.com/mongodb-mms-build-agent/releases/prod/<backup or monitoring agent specific platform and version file>
Cheers