# Securing Mongo in hybrid enviroment

**URL:** <https://forum.serverless.com/t/securing-mongo-in-hybrid-enviroment/4077>\
**Category:** Serverless Architectures\
**Created:** [March 23, 2018, 12:53pm UTC](https://forum.serverless.com/t/securing-mongo-in-hybrid-enviroment/4077 "2018-03-23T12:53:22Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Amantel](https://avatars.discourse-cdn.com/v4/letter/a/5daacb/32.png) [@Amantel](https://forum.serverless.com/u/Amantel)\
**Post date:** [March 23, 2018, 12:53pm UTC](https://forum.serverless.com/t/securing-mongo-in-hybrid-enviroment/4077/1 "2018-03-23T12:53:22Z")

</div>

Hallo!

We have several serverless functions and a classic server-based Mongo installation. Is there a nice way to make it more secure?  
Basic practice is disabling access to Mongo by limiting external IP’s to a list, but that seems to be not realistic with serveless (right?). Should only login/password auth be enough?  
Every example out there was dealing with one or another cloud database provider.

P.S. newbies guide got nothing on this.

---

<div class="post-metadata">

**Author:** ![bill](https://yyz2.discourse-cdn.com/flex036/user_avatar/forum.serverless.com/bill/32/1072_2.png) [@bill](https://forum.serverless.com/u/bill)\
**Post date:** [March 24, 2018, 9:23am UTC](https://forum.serverless.com/t/securing-mongo-in-hybrid-enviroment/4077/2 "2018-03-24T09:23:02Z")

</div>

> quote: make it more secure  
> Basic practice is disabling access to Mongo by limiting external IP’s to a list, but that seems to be not realistic with serveless (right?). Should only login/password auth be enough?

So you need build mongodb in VPC and set lambda functions in that VPC as well.

---

<div class="post-metadata">

**Author:** ![Amantel](https://avatars.discourse-cdn.com/v4/letter/a/5daacb/32.png) [@Amantel](https://forum.serverless.com/u/Amantel)\
**Post date:** [March 29, 2018, 7:20am UTC](https://forum.serverless.com/t/securing-mongo-in-hybrid-enviroment/4077/3 "2018-03-29T07:20:24Z")

</div>

Hallo!  
Thanks Bill, that is a nice idea. I was hoping that something like this was possible.  
I will try to find more info on Google VPC and how to put serverless function (cloud functions) there.