Migrate SAS, SPSS, Stata, DB2 IXF, and EBCDIC files into governed Apache Iceberg tables on Amazon S3 with cryptographically signed fidelity attestations.
Governed Legacy-Data Migration to Apache Iceberg on Amazon S3
Cepheus Portus migrates your organization's standalone legacy data files into governed Apache Iceberg tables on Amazon S3 - registered in the AWS Glue Data Catalog and queryable with Amazon Athena or Redshift Spectrum - directly inside your own AWS account, with no data leaving your environment.
Supported Legacy Formats
Portus reads the native source representation directly - no source system connection required, no intermediate conversion, no manual export:
SAS - .sas7bdat datasets and .xpt transport files
SPSS - .sav data files
Stata - .dta data files
DB2 PC/IXF - Export and interchange files without connecting back to DB2
Mainframe EBCDIC - Uses the associated COBOL copybook to interpret the record layout, fields, and structure
dBASE/FoxPro - .dbf files
The format-specific work stays inside the Portus reader. Your modern analytics environment receives governed, queryable Iceberg tables.
Byte-Faithful Fidelity With Cryptographic Proof
Every load is byte-for-byte faithful to the source and carries a cryptographically signed fidelity attestation proving the landed Iceberg table equals the source, row- and type-for-type. Regulated teams review evidence instead of building it.
Exact by construction - DECIMAL stays exact decimal, integers retain their true width, timestamps preserve their precision, and binary remains binary
Cryptographically sealed - Each governed conversion emits signed evidence including the source hash, row-equivalence digest, and output hash
Independently verifiable - A dependency-free reference verifier and published specification allow the evidence to be checked offline against the Cepheus Root CA
Register by reference - The attested Parquet bytes are the table's data, so what an auditor verifies is exactly what analysts query
Fail-loud integrity - The reader fails loud rather than guessing when it cannot read a value exactly
Manifest-Driven Bulk Migration
Point Portus at a CSV manifest and migrate an entire portfolio of legacy files in one run. The process is fail-soft: if individual files encounter errors, the remaining files continue processing. At completion, Portus produces a single reconciled migration certificate accounting for every declared file - migrated or failed - with row counts and digests.
Governed Movement Into Modern Data Platforms
Portus uses a single governed foundation for all source formats. The source is interpreted first, preserved through an exact internal model, and then delivered into Apache Iceberg on S3 with the fidelity and evidence chain retained:
Read the source representation - Portus interprets the supported native source data through its format-aware reader
Preserve the exact representation - The interpreted data passes through the common exact model so source fidelity remains part of the movement
Dispatch to the target - The governed output is delivered as Apache Iceberg tables on Amazon S3, registered in the AWS Glue Data Catalog, with signed evidence accompanying the operation
Runs Entirely in Your AWS Account
Portus deploys as a container on Amazon ECS Fargate (Graviton or x86_64), streams data in bounded memory, and requires only least-privilege access to your source and warehouse S3 buckets. There is no data egress, no source system installation, and no copy-out required.
Prove It on Your Own Data
Use representative source files from your environment to validate the Portus migration path:
Choose representative source files - Use supported formats that matter in your environment. The files stay in your AWS account.
Run the migration - Validate the governed movement path into Apache Iceberg on S3.
Verify the evidence - Review the resulting Iceberg tables, fidelity attestation, and independent verification material.
Understand the source correctly. Preserve the data correctly. Keep the process governed.
Highlights
Byte-faithful decode with cryptographically signed fidelity attestation. Every load carries proof that the landed Apache Iceberg table equals the source, row- and type-for-type. The attestation is verifiable offline against the Cepheus Root CA, so regulated teams review evidence instead of building it.
Manifest-driven bulk migration for entire file portfolios. Point Portus at a CSV manifest and migrate an entire portfolio of legacy files - SAS, SPSS, Stata, DB2 PC/IXF, EBCDIC with COBOL copybook, and dBASE - in one run. The process is fail-soft: individual file failures do not halt the batch. A single reconciled migration certificate accounts for every declared file (migrated or failed) with row counts and digests, giving teams a complete chain of custody for the entire migration.
Runs entirely in your own AWS account with zero data egress. Portus deploys as a container on ECS Fargate (Graviton or x86_64), streams in bounded memory, and needs only least-privilege access to your source and warehouse S3 buckets. No source system connection is required and no data leaves your environment. Iceberg tables are registered in the AWS Glue Data Catalog and are immediately queryable with Amazon Athena or Redshift Spectrum.
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
You pay based on one usage dimension: the volume of source data read and migrated, metered per gigabyte (GB). Your cost scales directly with how much data you move. There are no tiers or fixed instance sizes to choose. The more source data Portus reads and migrates, the more GB you are billed for. This usage-based model applies as Portus interprets supported source formats and delivers governed output into target platforms, with fidelity evidence retained throughout the process.
Top-of-mind questions for buyers
What counts as one GB for billing — source size or output size?
You are billed on gigabytes of source data read and migrated. The meter measures the source data Portus interprets, not the output written to the target. Each GB of source data read through the format-aware reader counts toward your usage.
Does the per-GB charge change depending on which source format I migrate?
No. Billing uses a single per-GB rate for source data read and migrated. The rate stays the same whether the source is statistical files, procedural data environments, mainframe records, or export files. The source format affects how Portus reads the data, not how you are metered.
If I re-run a migration on the same files, am I charged again?
The dimension meters source data read and migrated per GB. Each time Portus reads and migrates data, that volume is counted. A repeated run that re-reads the same source files would add to your metered GB. The listing does not describe free re-processing of previously migrated data.
cepheusonline.com
Helpful?
Vendor refund policy
All charges are usage-based (per GB of data migrated) and billed monthly via AWS Marketplace. Usage already metered reflects data processed in your own AWS account and is generally non-refundable. If you believe you were billed in error, email portus@cepheusonline.com within 30 days of the invoice with your AWS account ID and details; verified billing errors are refunded through AWS Marketplace.
How can we make this page better?
Tell us how we can improve this page, or report an issue with this product.
Give us feedbackReport a problem with this product or seller
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA).
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Containers are lightweight, portable execution environments that wrap server application software in a filesystem that includes everything it needs to run. Container applications run on supported container runtimes and orchestration services, such as Amazon Elastic Container Service (Amazon ECS) or Amazon Elastic Kubernetes Service (Amazon EKS). Both eliminate the need for you to install and operate your own container orchestration software by managing and scheduling containers on a scalable cluster of virtual machines.
Version release notes
Initial release of the Cepheus Portus AWS container. Byte-faithful decode of legacy files (SAS .sas7bdat, SPSS, Stata, DB2 IXF, mainframe copybook/EBCDIC, and more) to Apache Iceberg tables in your Glue Data Catalog on S3, registered by reference with a cryptographically signed fidelity attestation, so your data never leaves your account. Manifest-driven bulk migration converts an entire portfolio in one run, in parallel, and writes a single reconciled migration certificate. Usage is metered per GB migrated via AWS Marketplace Metering. Multi-architecture image (x86-64 and Graviton/arm64).
Additional details
Usage instructions
Cepheus Portus runs entirely inside your AWS account as an Amazon ECS (Fargate) task, so your data never leaves your account.
Deploy the stack. Use the CloudFormation template provided with this listing (portus-ingest.cfn.yaml) to create an ECS cluster, a Fargate task definition, and a least-privilege task role. Supply: the container image URI, your source S3 bucket, your Iceberg warehouse S3 bucket, your Glue database, and Fargate networking (subnets + security groups with a route to S3/Glue via NAT or VPC endpoints). Optionally supply a Secrets Manager ARN holding your signing-key PEM for signed attestations.
Migrate one file. Run the task with container overrides:
PORTUS_SOURCE_S3 = s3://your-bucket/path/file.sas7bdat
PORTUS_TARGET_TABLE = your_table
The task decodes the file to Iceberg-safe Parquet, verifies it byte-for-byte, registers it into your Glue Data Catalog by reference, and appends a signed attestation. Exit 0 means a fully attested load.
Migrate a portfolio (bulk). Put a CSV manifest in S3 (columns: source,target_table[,target_namespace,tags]) and set:
PORTUS_MANIFEST = s3://your-bucket/manifest.csv
PORTUS_MAX_PARALLEL = 4
Every declared file is migrated fail-soft and one reconciled migration certificate is written to your warehouse.
Query with Athena or Redshift Spectrum. Check the meter:
SELECT COUNT(*) loads, SUM(table_rows) rows FROM portus_attestation_log WHERE verdict='PASS';
Standard support is included with every subscription. Enterprise and regulated-industry support packages are available on request - contact portus@cepheusonline.com for details.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
3S Data Migration Services delivers end-to-end AWS cloud solutions including Assessment, Implementation, Managed Services, and Support — trusted by enterprises like NEC India and PFRDA. Our certified experts ensure seamless, secure, and cost-optimized cloud migrations tailored to your business needs.
pg-cdc streams PostgreSQL changes into query-ready Parquet and Iceberg tables on S3 - no Kafka required. Deploys as a container in your AWS account so data never leaves your environment.
Struggling with fragmented data or slow insights? RebelDot builds governed data platforms, ETL/ELT pipelines, and analytics solutions on AWS to turn raw data into business value.
Be the first to review this product. We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.