mongodb · lantoli · Nov 6, 2025 · Nov 6, 2025
@@ -32,7 +32,6 @@ Note these are also hosted on AWS CloudFormation Public Registry under Third Par
 | online-archive                                              | ![Build](https://img.shields.io/badge/GA-green) | [example](../examples/online-archive/online-archive.json)                                                                                           | [./online-archive/test](./online-archive/test)                                                                                           |
 | org-invitation                                              | ![Build](https://img.shields.io/badge/GA-green) | [example](../examples/org-invitation/org-invitation.json)                                                                                           | [./org-invitation/test](./org-invitation/test)                                                                                           |
 | private-endpoint                                            | ![Build](https://img.shields.io/badge/Deprecated-red) | [example](../examples/private-endpoint/privateEndpoint.json)                                                                                        | [./private-endpoint/test](./private-endpoint/test)                                                                                       |
-| private-endpoint-adl                                        | ![Build](https://img.shields.io/badge/GA-green) | [example](../examples/private-endpoint-adl/endpoint-adl.json)                                                                                       | [./private-endpoint-adl/test](./private-endpoint-adl/test)                                                                               |
 | private-endpoint-regional-mode                              | ![Build](https://img.shields.io/badge/GA-green) | [example](../examples/private-endpoint-regional-mode/privateEndpointRegionalMode.json)                                                              | [./private-endpoint-regional-mode/test](./private-endpoint-regional-mode/test)                                                           |
 | project                                                     | ![Build](https://img.shields.io/badge/GA-green) | [example](../examples/project/project.json)                                                                                                         | [./project/test](./project/test)                                                                                                         |
 | project-invitation                                          | ![Build](https://img.shields.io/badge/GA-green) | [example](../examples/project-invitation/project-invitation.json)                                                                                   | [./project-invitation/test](./project-invitation/test)                                                                                   |

@@ -162,7 +162,7 @@ _Update requires_: [No interruption](https://docs.aws.amazon.com/AWSCloudFormati
 
 #### Scopes
 
-List that contains clusters and MongoDB Atlas Data Lakes that this database user can access. If omitted, MongoDB Cloud grants the database user access to all the clusters and MongoDB Atlas Data Lakes in the project.
+List that contains clusters and MongoDB Atlas Data Federation that this database user can access. If omitted, MongoDB Cloud grants the database user access to all the clusters and MongoDB Atlas Data Federation in the project.
 
 _Required_: No
 
@@ -172,8 +172,8 @@ _Update requires_: [No interruption](https://docs.aws.amazon.com/AWSCloudFormati
 
 #### Username
 
-Human-readable label that represents the user that authenticates to MongoDB. The format of this label depends on the method of authentication. This will be USER_ARN or ROLE_ARN if AWSIAMType is USER or ROLE. Refer https://www.mongodb.com/docs/api/doc/atlas-admin-api-v2/operation/operation-createdatabaseuser 
- 
+Human-readable label that represents the user that authenticates to MongoDB. The format of this label depends on the method of authentication. This will be USER_ARN or ROLE_ARN if AWSIAMType is USER or ROLE. Refer https://www.mongodb.com/docs/atlas/reference/api-resources-spec/#tag/Database-Users/operation/createDatabaseUser for details.
+
 _Required_: Yes
 
 _Type_: String

@@ -138,7 +138,7 @@
       "uniqueItems": true
     },
     "Scopes": {
-      "description": "List that contains clusters and MongoDB Atlas Data Lakes that this database user can access. If omitted, MongoDB Cloud grants the database user access to all the clusters and MongoDB Atlas Data Lakes in the project.",
+      "description": "List that contains clusters and MongoDB Atlas Data Federation that this database user can access. If omitted, MongoDB Cloud grants the database user access to all the clusters and MongoDB Atlas Data Federation in the project.",
       "items": {
         "$ref": "#/definitions/scopeDefinition"
       },

@@ -41,7 +41,7 @@ Properties:
 
 #### CloudProviderConfig
 
-Cloud provider linked to this data lake..
+Cloud provider linked to this Atlas Data Federation.
 
 _Required_: No
 
@@ -51,7 +51,7 @@ _Update requires_: [No interruption](https://docs.aws.amazon.com/AWSCloudFormati
 
 #### DataProcessRegion
 
-Information about the cloud provider region to which the data lake routes client connections. MongoDB Cloud supports AWS only.
+Information about the cloud provider region to which the Atlas Data Federation routes client connections. MongoDB Cloud supports AWS only.
 
 _Required_: No
 

@@ -1,6 +1,6 @@
 # MongoDB::Atlas::FederatedDatabaseInstance CloudProviderConfig
 
-Cloud provider linked to this data lake..
+Cloud provider linked to this Atlas Data Federation.
 
 ## Syntax
 
@@ -26,7 +26,7 @@ To declare this entity in your AWS CloudFormation template, use the following sy
 
 #### RoleId
 
-Unique identifier of the role that the data lake can use to access the data stores.Required if specifying cloudProviderConfig.
+Unique identifier of the role that the Atlas Data Federation can use to access the data stores.Required if specifying cloudProviderConfig.
 
 _Required_: No
 

@@ -27,7 +27,7 @@ To declare this entity in your AWS CloudFormation template, use the following sy
 
 #### DataSources
 
-Array that contains the data stores that map to a collection for this data lake.
+Array that contains the data stores that map to a collection for this Atlas Data Federation.
 
 _Required_: No
 

@@ -50,7 +50,7 @@ _Update requires_: [No interruption](https://docs.aws.amazon.com/AWSCloudFormati
 
 #### Name
 
-Human-readable label that identifies the database to which the data lake maps data.
+Human-readable label that identifies the database to which the Atlas Data Federation maps data.
 
 _Required_: No
 

@@ -1,6 +1,6 @@
 # MongoDB::Atlas::FederatedDatabaseInstance DataProcessRegion
 
-Information about the cloud provider region to which the data lake routes client connections. MongoDB Cloud supports AWS only.
+Information about the cloud provider region to which the Atlas Data Federation routes client connections. MongoDB Cloud supports AWS only.
 
 ## Syntax
 
@@ -26,7 +26,7 @@ To declare this entity in your AWS CloudFormation template, use the following sy
 
 #### CloudProvider
 
-Name of the cloud service that hosts the data lake's data stores.
+Name of the cloud service that hosts the Atlas Data Federation data stores.
 
 _Required_: No
 
@@ -36,7 +36,7 @@ _Update requires_: [No interruption](https://docs.aws.amazon.com/AWSCloudFormati
 
 #### Region
 
-Name of the region to which the data lake routes client connections.
+Name of the region to which the Atlas Data Federation routes client connections.
 
 _Required_: Yes
 

@@ -127,7 +127,7 @@ _Update requires_: [No interruption](https://docs.aws.amazon.com/AWSCloudFormati
 
 #### Urls
 
-URLs of the publicly accessible data files. You can't specify URLs that require authentication. Atlas Data Lake creates a partition for each URL. If empty or omitted, Data Lake uses the URLs from the store specified in the dataSources.storeName parameter.
+URLs of the publicly accessible data files. You can't specify URLs that require authentication. Atlas Data Federation creates a partition for each URL. If empty or omitted, Data Federation uses the URLs from the store specified in the dataSources.storeName parameter.
 
 _Required_: No
 

@@ -49,7 +49,7 @@ _Update requires_: [No interruption](https://docs.aws.amazon.com/AWSCloudFormati
 
 #### TagSets
 
-List that contains tag sets or tag specification documents. If specified, Atlas Data Lake routes read requests to replica set member or members that are associated with the specified tags.
+List that contains tag sets or tag specification documents. If specified, Atlas Data Federation routes read requests to replica set member or members that are associated with the specified tags.
 
 _Required_: No
 

@@ -28,7 +28,7 @@ To declare this entity in your AWS CloudFormation template, use the following sy
 
 #### Databases
 
-Array that contains the queryable databases and collections for this data lake.
+Array that contains the queryable databases and collections for this Atlas Data Federation.
 
 _Required_: No
 
@@ -38,7 +38,7 @@ _Update requires_: [No interruption](https://docs.aws.amazon.com/AWSCloudFormati
 
 #### Stores
 
-Array that contains the data stores for the data lake.
+Array that contains the data stores for the Atlas Data Federation.
 
 _Required_: No
 

@@ -1,6 +1,6 @@
 # MongoDB::Atlas::FederatedDatabaseInstance Store
 
-Array that contains the data stores for the data lake.
+Array that contains the data stores for the Atlas Data Federation.
 
 ## Syntax
 
@@ -32,7 +32,7 @@ To declare this entity in your AWS CloudFormation template, use the following sy
 
 #### Name
 
-Human-readable label that identifies the data store. The databases.[n].collections.[n].dataSources.[n].storeName field references this values as part of the mapping configuration. To use MongoDB Cloud as a data store, the data lake requires a serverless instance or an M10 or higher cluster.
+Human-readable label that identifies the data store. The databases.[n].collections.[n].dataSources.[n].storeName field references this values as part of the mapping configuration. To use MongoDB Cloud as a data store, the Atlas Data Federation requires a serverless instance or an M10 or higher cluster.
 
 _Required_: No
 

@@ -3,23 +3,23 @@
   "definitions": {
     "CloudProviderConfig": {
       "type": "object",
-      "description": "Cloud provider linked to this data lake..",
+      "description": "Cloud provider linked to this Atlas Data Federation.",
       "properties": {
         "ExternalId": {
           "type": "string",
-          "description": "Unique identifier of the role that the data lake can use to access the data stores.Required if specifying cloudProviderConfig."
+          "description": "Unique identifier of the role that the Atlas Data Federation can use to access the data stores.Required if specifying cloudProviderConfig."
         },
         "IamAssumedRoleARN": {
           "type": "string",
-          "description": "Amazon Resource Name (ARN) of the Identity and Access Management (IAM) role that the data lake assumes when accessing data stores."
+          "description": "Amazon Resource Name (ARN) of the Identity and Access Management (IAM) role that the Atlas Data Federation assumes when accessing data stores."
         },
         "IamUserARN": {
           "type": "string",
-          "description": "Amazon Resource Name (ARN) of the user that the data lake assumes when accessing data stores."
+          "description": "Amazon Resource Name (ARN) of the user that the Atlas Data Federation assumes when accessing data stores."
         },
         "RoleId": {
           "type": "string",
-          "description": "Unique identifier of the role that the data lake can use to access the data stores.Required if specifying cloudProviderConfig."
+          "description": "Unique identifier of the role that the Atlas Data Federation can use to access the data stores.Required if specifying cloudProviderConfig."
         },
         "TestS3Bucket": {
           "type": "string",
@@ -30,15 +30,15 @@
     },
     "DataProcessRegion": {
       "type": "object",
-      "description": "Information about the cloud provider region to which the data lake routes client connections. MongoDB Cloud supports AWS only.",
+      "description": "Information about the cloud provider region to which the Atlas Data Federation routes client connections. MongoDB Cloud supports AWS only.",
       "properties": {
         "CloudProvider": {
           "type": "string",
-          "description": "Name of the cloud service that hosts the data lake's data stores."
+          "description": "Name of the cloud service that hosts the Atlas Data Federation data stores."
         },
         "Region": {
           "type": "string",
-          "description": "Name of the region to which the data lake routes client connections."
+          "description": "Name of the region to which the Atlas Data Federation routes client connections."
         }
       },
       "required": [
@@ -53,7 +53,7 @@
         "Databases": {
           "type": "array",
           "insertionOrder": false,
-          "description": "Array that contains the queryable databases and collections for this data lake.",
+          "description": "Array that contains the queryable databases and collections for this Atlas Data Federation.",
           "items": {
             "$ref": "#/definitions/Database",
             "type": "object"
@@ -62,7 +62,7 @@
         "Stores": {
           "type": "array",
           "insertionOrder": false,
-          "description": "Array that contains the data stores for the data lake.",
+          "description": "Array that contains the data stores for the Atlas Data Federation.",
           "items": {
             "$ref": "#/definitions/Store",
             "type": "object"
@@ -89,7 +89,7 @@
         },
         "Name": {
           "type": "string",
-          "description": "Human-readable label that identifies the database to which the data lake maps data."
+          "description": "Human-readable label that identifies the database to which the Atlas Data Federation maps data."
         },
         "Views": {
           "type": "array",
@@ -105,11 +105,11 @@
     },
     "Store": {
       "type": "object",
-      "description": "Array that contains the data stores for the data lake.",
+      "description": "Array that contains the data stores for the Atlas Data Federation.",
       "properties": {
         "Name": {
           "type": "string",
-          "description": "Human-readable label that identifies the data store. The databases.[n].collections.[n].dataSources.[n].storeName field references this values as part of the mapping configuration. To use MongoDB Cloud as a data store, the data lake requires a serverless instance or an M10 or higher cluster."
+          "description": "Human-readable label that identifies the data store. The databases.[n].collections.[n].dataSources.[n].storeName field references this values as part of the mapping configuration. To use MongoDB Cloud as a data store, the Atlas Data Federation requires a serverless instance or an M10 or higher cluster."
         },
         "Provider": {
           "type": "string",
@@ -137,7 +137,7 @@
       "properties": {
         "DataSources": {
           "type": "array",
-          "description": "Array that contains the data stores that map to a collection for this data lake.",
+          "description": "Array that contains the data stores that map to a collection for this Atlas Data Federation.",
           "insertionOrder": false,
           "items": {
             "$ref": "#/definitions/DataSource",
@@ -192,7 +192,7 @@
         },
         "Urls": {
           "type": "array",
-          "description": "URLs of the publicly accessible data files. You can't specify URLs that require authentication. Atlas Data Lake creates a partition for each URL. If empty or omitted, Data Lake uses the URLs from the store specified in the dataSources.storeName parameter.",
+          "description": "URLs of the publicly accessible data files. You can't specify URLs that require authentication. Atlas Data Federation creates a partition for each URL. If empty or omitted, Data Federation uses the URLs from the store specified in the dataSources.storeName parameter.",
           "insertionOrder": false,
           "items": {
             "type": "string"
@@ -232,7 +232,7 @@
         },
         "TagSets": {
           "type": "array",
-          "description": "List that contains tag sets or tag specification documents. If specified, Atlas Data Lake routes read requests to replica set member or members that are associated with the specified tags.",
+          "description": "List that contains tag sets or tag specification documents. If specified, Atlas Data Federation routes read requests to replica set member or members that are associated with the specified tags.",
           "insertionOrder": false,
           "items": {
             "$ref": "#/definitions/ReadReferenceTags"
@@ -295,12 +295,12 @@
   "properties": {
     "CloudProviderConfig": {
       "type": "object",
-      "description": "Cloud provider linked to this data lake.",
+      "description": "Cloud provider linked to this Atlas Data Federation.",
       "$ref": "#/definitions/CloudProviderConfig"
     },
     "DataProcessRegion": {
       "type": "object",
-      "description": "Information about the cloud provider region to which the data lake routes client connections. MongoDB Cloud supports AWS only.",
+      "description": "Information about the cloud provider region to which the Atlas Data Federation routes client connections. MongoDB Cloud supports AWS only.",
       "$ref": "#/definitions/DataProcessRegion"
     },
     "ProjectId": {

@@ -15,6 +15,13 @@ Resources:
             Principal:
               Service: resources.cloudformation.amazonaws.com
             Action: sts:AssumeRole
+            Condition:
+              StringEquals:
+                aws:SourceAccount:
+                  Ref: AWS::AccountId
+              StringLike:
+                aws:SourceArn:
+                  Fn::Sub: arn:${AWS::Partition}:cloudformation:${AWS::Region}:${AWS::AccountId}:type/resource/MongoDB-Atlas-FederatedDatabaseInstance/*
       Path: "/"
       Policies:
         - PolicyName: ResourceTypePolicy

@@ -1,6 +1,6 @@
 {
   "AWSTemplateFormatVersion": "2010-09-09",
-  "Description": "This template creates an Atlas Data Lake in the specified project",
+  "Description": "This template creates an Atlas Data Federation in the specified project",
   "Parameters": {
     "Profile": {
       "Type": "String",

@@ -1,6 +1,6 @@
 {
   "AWSTemplateFormatVersion": "2010-09-09",
-  "Description": "This template creates an Atlas Data Lake in the specified project",
+  "Description": "This template creates an Atlas Data Federation in the specified project",
   "Parameters": {
     "Profile": {
       "Type": "String",