14

I want to connect Robo 3T (formerly robomongo) from my Mac laptop with AWS's DocumentDB. I followed numerous tutorials however could not find any specific to DocumentDB.

During the testing phase it passes step #1 "connected to my EC2 instance", however fails on step #2 with the message "failed to connect to ...docdb.amazonaws.com:27017 via SSH tunnel". Has anyone been able to get this to work?

mediastream
  • 253
  • 3
  • 8
  • Attention: Curently it is not possible with Robo 3T to edit documents in DocumentDB -> https://stackoverflow.com/questions/57328623/unrecognized-field-ntoreturn-error-in-documendb – Strinder Jun 19 '20 at 13:50

4 Answers4

21

here is my config in five scree-shots. Connection Tab Authentication Tab SSH Tunnel SSL Advanced

Micha Roon
  • 3,957
  • 2
  • 30
  • 48
  • This, combined with the ssh command from Arun Ramachandran got it working. Remember, default db is the name of your db. It's not admin. – Nikhil Jun 13 '19 at 15:58
10

Steps to connect from Robo 3T

 1. Host : localhost and 28017: source port that we mentioned in ssh
    tunnel
 2. Authentication tab - Database : DBname; Username and password of
    the documentDb
 3. In SSL tab, click Use SSL protocol
 4. Click use CA certificate
 5. Import the CA certificate in .pem format. Download it from this link
    : https://s3.amazonaws.com/rds-downloads/rds-combined-ca-bundle.pem
 6. Click on Advanced options and keep Invalid hostnames : Allowed
 7. Give a name for the connection and hit connect button.
 8. Connection should be established by now.

I assume you use the below command for SSH tunnel.

ssh -i "ec2Access.pem" -L 28017:sample-cluster.cluster-cu52jq5kfddg.us-east-1.docdb.amazonaws.com:27017 ubuntu@ec2-34-229-221-164.compute-1.amazonaws.com -N 

Hope this will work.

4

Via SSH-Tunnel on macOS this seems the way to got (fiddled around with the CA-pem without success before):

SSL settings macOS Robo 3T

Strinder
  • 2,111
  • 2
  • 21
  • 34
4

For those who still get stuck with the problem, there's a detailed guide at https://aws.amazon.com/blogs/database/part-3-getting-started-with-amazon-documentdb-using-robo-3t/

One important note is that the EC2 for SSH tunnel and the DocumentDB cluster must be in the same VPC (not necessarily the same Security Group if they opened the needed port (22 & 27017 for example) ). Furthermore, you should create a testing database & insert at least one document in order to set the Authentication for Robo3T connection as of

"On the Authentication tab, enter the authentication information for your cluster. Make sure to use a custom database name like ‘test’ or ‘testdb’. Using ‘admin’ (default setting) does not work for DocumentDB for clusters with no databases. Once you have created your first database you can modify your connection to use ‘admin’."

Hope it help!!