Sold by: Elevarq
Deployed on AWS
Local-first, read-only PostgreSQL diagnostic collector. Passwordless onboarding to Amazon RDS and Aurora over verify-full TLS, with no diagnostic-data egress to Elevarq.
Overview
Elevarq Signals is an open-source (BSD-3-Clause) diagnostic collector for PostgreSQL that runs entirely inside your own AWS environment. It connects to a managed database, collects a structured, read-only diagnostic snapshot on a schedule, and keeps every byte local — no telemetry, and no diagnostic-data egress to Elevarq.
Your data stays in your account
- The only outbound calls are the cloud-authentication and TLS requests you configure, made to your own AWS services.
- Snapshots are written locally and exported as a portable archive for downstream analysis.
Read-only by design
- Read-only access is enforced by three independent layers.
- Unsafe roles (superuser, replication) are blocked before collection begins.
Passwordless onboarding on Amazon RDS and Aurora
- Connect with RDS IAM authentication — no long-lived database password to store or rotate.
- Or use a cloud secret store: AWS Secrets Manager or AWS Systems Manager Parameter Store.
- Every connection uses verify-full TLS and a least-privilege pg_monitor role.
Production-ready packaging
- Signed, multi-architecture container (linux/amd64 and linux/arm64), shipped with an SBOM.
- Helm chart for Amazon EKS with liveness/readiness probes, least-privilege security contexts, and a persistent volume for local snapshots.
Highlights
- Read-only by design: three independent enforcement layers, with unsafe roles (superuser, replication) blocked before collection starts
- Passwordless onboarding to Amazon RDS and Aurora via RDS IAM (or a cloud secret store) over verify-full TLS with a least-privilege pg_monitor role
- Local-first: no telemetry and no diagnostic-data egress to Elevarq; signed multi-arch container and Helm chart for Amazon EKS
Details
Sold by
Categories
Delivery method
Supported services
Delivery option
Container image (Amazon ECS / Fargate)
Helm chart (Amazon EKS)
Latest version
Operating system
Linux
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
This product is available free of charge. Free subscriptions have no end date and may be canceled any time.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Vendor refund policy
This product is offered free of charge. There are no fees and therefore no refunds. Support is community-based via GitHub Issues at https://github.com/Elevarq/Signals .
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Container image (Amazon ECS / Fargate)
Supported services: Learn more
- Amazon ECS
Container image
Containers are lightweight, portable execution environments that wrap server application software in a filesystem that includes everything it needs to run. Container applications run on supported container runtimes and orchestration services, such as Amazon Elastic Container Service (Amazon ECS) or Amazon Elastic Kubernetes Service (Amazon EKS). Both eliminate the need for you to install and operate your own container orchestration software by managing and scheduling containers on a scalable cluster of virtual machines.
Version release notes
Elevarq Signals 1.0.0 (GA). Read-only PostgreSQL diagnostic collector - the same cosign-signed image and chart as the Helm delivery. Passwordless authentication (Amazon RDS IAM, Azure Entra, GCP Cloud SQL IAM), no telemetry, and no diagnostic data sent to Elevarq. Release notes: https://github.com/Elevarq/Signals/releases/tag/v1.0.0
Additional details
Usage instructions
-
Authenticate Docker to the AWS Marketplace registry: aws ecr get-login-password --region us-east-1 | docker login --username AWS --password-stdin 709825985650.dkr.ecr.us-east-1.amazonaws.com
-
Pull the image: docker pull 709825985650.dkr.ecr.us-east-1.amazonaws.com/elevarq/elevarq-signals:1.0.0
-
Amazon ECS / Fargate task definition:
- Use the image URI above. The container runs as non-root (uid 10001) with a read-only root filesystem.
- Supply PostgreSQL connection config via a mounted /etc/signals/signals.yaml or SIGNALS_TARGET_* environment variables. Amazon RDS IAM authentication is recommended (no password stored).
- Provide the API token via the SIGNALS_API_TOKEN environment variable, sourced from AWS Secrets Manager or SSM Parameter Store in the task definition secrets block - never hard-coded.
-
Durable snapshot storage: the Fargate task filesystem is ephemeral. Mount an Amazon EFS volume at /data (or an EBS/bind volume on EC2-backed ECS) so exported snapshots survive task restarts.
-
Verify: run signalsctl collect now, then signalsctl export. Full configuration: https://elevarq.com/docs/signals
Resources
Vendor resources
Support
Vendor support
Community support via GitHub Issues at https://github.com/Elevarq/Signals . Report security vulnerabilities to security@elevarq.com (see SECURITY.md).
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
Production-ready, security-hardened pgagroal container for PostgreSQL: restrictive shipped defaults, a non-root runtime, signed multi-arch images, a Kubernetes Helm chart, and zero telemetry.
Customer reviews
No customer reviews yet
Be the first to review this product . We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.