custom-db-role.json

{
  "AWSTemplateFormatVersion": "2010-09-09",
  "Description": "This template creates a Custom DB Role.",
  "Parameters": {
    "Profile": {
      "Type": "String",
      "Description": "MongoDB Atlas Profile name"
    },
    "ProjectId": {
      "Type": "String",
      "Description": "MongoDB project Key"
    },
    "DatabaseName": {
      "Type": "String",
      "Description": "Human-readable label that identifies the database on which you grant the action to one MongoDB user"
    },
    "Collection": {
      "Type": "String",
      "Description": "Human-readable label that identifies the collection on which you grant the action to one MongoDB user"
    },
    "Action": {
      "Type": "String",
      "Description": "Human-readable label that identifies the privilege action",
      "Default": "FIND"
    },
    "RoleName": {
      "Type": "String",
      "Description": "Human-readable label that identifies the role for the request. This name must be unique for this custom role in this project"
    }
  },
  "Mappings": {},
  "Resources": {
    "CustomDBRole": {
      "Type": "MongoDB::Atlas::CustomDBRole",
      "Properties": {
        "ProjectId": {
          "Ref": "ProjectId"
        },
        "Actions": [
          {
            "Action": {
              "Ref": "Action"
            },
            "Resources": [
              {
                "Collection": {
                  "Ref": "Collection"
                },
                "DB": {
                  "Ref": "DatabaseName"
                }
              }
            ]
          }
        ],
        "RoleName": {
          "Ref": "RoleName"
        },
        "Profile": {
          "Ref": "Profile"
        }
      }
    }
  },
  "Outputs": {}
}