Docs

Document Database for MongoDB

Managing allowlists

Creating allowlist

After the Document Database for MongoDB instance is created successfully, you can set allowlist for the instance to allow devices to access the instance. This topic describes how to create allowlist via the console.

Background information

To ensure the security and stability of the MongoDB database, accessing MongoDB instances from any IP address is not allowed by default in the system. Before using MongoDB instances, you need to create an allowlist and add the client's IP address or CIDR block to the allowlist of the MongoDB instance to allow the client to access the MongoDB instance. We recommend that you regularly maintain and manage the allowlist to ensure the security of accessing MongoDB instances.

Limits

Procedure

In the upper-left corner of the top menu bar, select the project and region for instance.

In the left navigation bar, choose NoSQL Database > MongoDB > Allowlists.

On the Allowlists page, click Create allowlist.

In the Create allowlist panel, set the following parameters.

Parameter	Description
Project	Select the project to be added to the allowlist from the drop-down list. By default, the default project will be added. tip If you use the MongoDB cloud service through IAM user, you can only see the allowlist information under the projects that have been authorized for the current IAM user. For more details, refer to Using MongoDB with IAM users.
Allowlist name	Enter the name of the allowlist, which must meet all the following requirements: It cannot start with a number or hyphen (-). It can only contain Chinese characters, letters, digits, underscores (_), and hyphens (-). The length should be 1 to 128 characters.
Description	Enter remarks on the allowlist, which must not exceed 200 characters.
IP address	Enter IP addresses or IP address segments in CIDR format. tip Each allowlist can contain up to 1000 IP addresses or IP address segments in CIDR format. Duplicate addresses are not allowed. Separate multiple addresses with commas (,). Set to 0.0.0.0/0 to allow access from all addresses. Setting 127.0.0.1 blocks access from all addresses. Setting both 0.0.0.0/0 and 127.0.0.1 allows access from all addresses. Setting 192.168.1.0/24 allows access from IP addresses within that network segment. Setting 192.168.1.1 allows access from only this IP address.
Default allowlist	Select whether to set the new creation allowlist to the default allowlist. If set as the default allowlist, it is automatically selected when creating new instances. tip Each Volcano Engine account can allow up to one default allowlist per region. A newly created default allowlist will automatically override the existing default allowlist. That is, the existing default allowlist will automatically become a non-default allowlist. For more details, refer to Constraints and limits.

click OK.

Subsequent operations

After creating allowlists, you can associate the allowlist with target instances. For more information on how to associate allowlists, refer to Associating instances and allowlists.

Relevant APIs

API	Description
CreateAllowList	Call the CreateAllowList API to create a new IP allowlist.
DescribeAllowLists	Call the DescribeAllowLists API to query all IP allowlists for the account in the specified region.
DescribeAllowListDetail	Call the DescribeAllowListDetail API to query the details of the target allowlist group, including the IP addresses and the details of associated instances.

Last updated: 2026.02.09 17:03:13