Sold by: Baffle, Inc.
Deployed on AWS
Free Trial
Baffle's data-centric protection enables organizations to comply with the latest data protection regulations and cybersecurity frameworks. Baffle provides the benefits of application-level encryption without code changes, providing you the most flexible solution for protecting sensitive data in AWS.
Overview
With Baffle, Amazon RDS and Aurora are the only PostgreSQL cloud services that have more data security capabilities than Oracle and MS SQL Server, enabling you to migrate off of costly legacy databases and securely modernize your applications.
Challenges Regulations and security frameworks, such as GDPR, NIST, CCPA, and PCI, demand control & "least privilege" access to sensitive data in AWS. Baffle provides application-level encryption (the gold standard for data security) without the cost, time, and effort of other products.
Solution Baffle has 4 key features:
- No-code Implementation deploys and protects your data and 3rd party apps in hours, not weeks/months
- Highly performant and scalable architecture mean applications continue to meet their SLAs
- Data-in-Use Protection ensures data is protected, even from compromised database or cloud admin accounts
- Role-based Access Control ensures only authorized users can access sensitive data in clear text
Benefits Baffle's solution is easy to deploy, fast and scalable, provides comprehensive and flexible security which quickly protects your sensitive data, speeds time to value, reduces your costs to to implement and maintain, and virtually eliminates the impacts of a data breach
Highlights
- Easy: Baffle's No-code Implementation means no application code changes are required to deploy and use as well as any changes in data protection policies dont impact application development
- Fast: Baffle's architecture ensures fast, scalable performance, adapting to increased loads through vertical or horizontal scaling. It optimizes cryptographic operations with hardware capabilities.
- Comprehensive: Baffle's Data-in-use Protection secures data during access, maintaining a fail-safe posture even in breaches. It complements data security at rest and in transit.
Details
Sold by
Categories
Delivery method
Delivery option
Baffle Trial for RDS & Aurora PostgreSQL
Latest version
Operating system
AmazonLinux 2015.05.04
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Free trial
Try this product free for 30 days according to the free trial terms set by the vendor. Usage-based pricing is in effect for usage beyond the free trial terms. Your free trial gets automatically converted to a paid subscription when the trial ends, but may be canceled any time before that.
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Cost/hour |
|---|---|
t3.large | $0.50 |
m5.xlarge | $0.50 |
t2.large | $0.50 |
m4.xlarge | $0.50 |
m5.large | $0.50 |
t3.xlarge | $0.50 |
Dimensions summary
This trial bills by the hour based on the AWS instance size you run. You choose from six compute options: t2.large, t3.large, t3.xlarge, m4.xlarge, m5.large, and m5.xlarge. Pricing scales with the instance you select, so larger or more powerful instances carry a different hourly rate. You pay only for the hours each instance runs, with no upfront commitment. Each option delivers the same data protection capability for RDS and Aurora PostgreSQL; they differ only in the underlying compute resources assigned to your workload.
Top-of-mind questions for buyers
You pay for each hour the chosen AWS instance runs. The instance name, such as m5.xlarge or t3.large, maps to a specific AWS compute size. One billed hour equals one running hour of that single instance providing the data protection service.
Software charges meter running time only. When you stop an instance, hourly software charges stop accruing. Underlying AWS infrastructure fees, such as storage, may still apply while resources remain provisioned. You pay only for the hours each instance actually runs.
Each option provides the same data protection for RDS and Aurora PostgreSQL. This includes masking, tokenization, and encryption with role-based access control. The options differ only in assigned compute resources, so your hourly cost reflects instance size, not feature differences.
baffle.io
Helpful?
Vendor refund policy
Free 30-day trial. Refunds are handled on a case-by-case basis via support.
Custom pricing options
Request a private offer to receive a custom quote.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Baffle Trial for RDS & Aurora PostgreSQL
"This CloudFormation (CF) template automates the setup for Baffle Data Protection for Databases on AWS. It orchestrates the creation of various resources necessary for the workflow, streamlining the process and ensuring consistency.
The template begins with parameter definitions allowing customization of workflow options, user credentials, and IP whitelisting. It then employs conditions to adapt resource creation based on the selected workflow.
The template provisions foundational resources like VPCs, subnets, internet gateways, and route tables for networking. It also sets up an S3 bucket and IAM roles for managing keys and permissions.
For database management, it creates an RDS instance with custom settings, including disabling SSL and enabling logical replication. Secrets for database access are securely managed using AWS Secrets Manager.
Security measures include the setup of EC2 security groups and IAM roles, ensuring controlled access to resources and encrypted data transmission.
Additionally, the template facilitates Database Migration Service (DMS) setup for data replication tasks, providing endpoints and task configurations for migration operations.
Outputs provide convenient access URLs for Baffle Manager, PGAdmin, and DMS migration tasks, along with commands for managing DMS tasks via AWS CLI.
By encapsulating all these configurations into a single template, this CF script simplifies the deployment and management of Baffle Data Protection, fostering a secure and efficient data environment on AWS."
CloudFormation Template (CFT)
AWS CloudFormation templates are JSON or YAML-formatted text files that simplify provisioning and management on AWS. The templates describe the service or application architecture you want to deploy, and AWS CloudFormation uses those templates to provision and configure the required services (such as Amazon EC2 instances or Amazon RDS DB instances). The deployed application and associated resources are called a "stack."
Version release notes
Release 2.8.4.3
Additional details
Usage instructions
Run the Cloud Formation script and use the following guide https://quickstart-baffle.s3.us-east-2.amazonaws.com/Quickstart+POC+-+Baffle+Data+Protection+for+Amazon+RDS+and+Aurora+(PostgreSQL)/AWS+Baffle+Static+Masking+for+Lower+Environment.docx.pdf The IAM role named BaffleShieldRole is designed with three key policies: Assume Role Policy: This policy allows EC2 instances to assume the role. Consequently, these instances gain permissions granted by the role to interact with other AWS services. AccessBaffleDBSecret Policy: Grants permission to retrieve sensitive information, such as database credentials (BaffleDBSecret), from AWS Secrets Manager. AccessScriptBucketAccess Policy: Provides access to an S3 bucket (BaffleKeyStorageBucket) for various operations, including listing and deleting objects. Scripts are downloaded from a public GitHub repository. The scripts used by the deployment of the Baffle service to get up-to-date configuration. An email ID is requested to create an account with the Baffle service. The email ID is used to ensure uniqueness of the account name. The email ID is not collected nor will Baffle send emails to that email ID
Resources
Vendor resources
Support
Vendor support
PLEASE NOTE: Pricing is for illustration purposes only and varies depending on customer environment, requirements and other factors. Please contact us at for more details.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
Baffle's Amazon S3 Data Proxy enables encryption of entire files or elements in files (text, JSON, XML, CSV, and Parquet) while transferring to Amazon S3 buckets. The client protocols include S3, SFTP, HTTP or API to support all transfers without infrastructure modification or code changes.
Agentic modernization support for Oracle and Microsoft SQL Server for use with Amazon RDS for PostgreSQL and Amazon Aurora PostgreSQL, including schema conversion, data migration and validation, and application remediation with GenAI and GitHub Copilot integration.
At Datavail, we have a team of certified DBAs who have deep knowledge and expertise on Amazon RDS/Aurora for the PostgreSQL environments. Our expert database team will review your RDS/Aurora instance from various aspects to make sure the database is configured for optimal scalability, performance, high availability, monitoring, logging, and alert setup
DBLab Standard Edition (DBLab SE) delivers fast, cost-effective database cloning, enabling agile teams to create instant, full-size production clones for development, testing, and staging, all managed like code, integrated into CI/CD pipelines, and optimized with transparent pricing.
Customer reviews
No customer reviews yet
Be the first to review this product . We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.