Overview
Elevarq Signals is an open-source (BSD-3-Clause) diagnostic collector for PostgreSQL that runs entirely inside your own AWS environment. It connects to a managed database, collects a structured, read-only diagnostic snapshot on a schedule, and keeps every byte local — no telemetry, and no diagnostic-data egress to Elevarq.
Your data stays in your account
- The only outbound calls are the cloud-authentication and TLS requests you configure, made to your own AWS services.
- Snapshots are written locally and exported as a portable archive for downstream analysis.
Read-only by design
- Read-only access is enforced by three independent layers.
- Unsafe roles (superuser, replication) are blocked before collection begins.
Passwordless onboarding on Amazon RDS and Aurora
- Connect with RDS IAM authentication — no long-lived database password to store or rotate.
- Or use a cloud secret store: AWS Secrets Manager or AWS Systems Manager Parameter Store.
- Every connection uses verify-full TLS and a least-privilege pg_monitor role.
Production-ready packaging
- Signed, multi-architecture container (linux/amd64 and linux/arm64), shipped with an SBOM.
- Helm chart for Amazon EKS with liveness/readiness probes, least-privilege security contexts, and a persistent volume for local snapshots.
Highlights
- Read-only by design: three independent enforcement layers, with unsafe roles (superuser, replication) blocked before collection starts
- Passwordless onboarding to Amazon RDS and Aurora via RDS IAM (or a cloud secret store) over verify-full TLS with a least-privilege pg_monitor role
- Local-first: no telemetry and no diagnostic-data egress to Elevarq; signed multi-arch container and Helm chart for Amazon EKS
Details
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
Pricing
Vendor refund policy
This product is offered free of charge. There are no fees and therefore no refunds. Support is community-based via GitHub Issues at https://github.com/Elevarq/Signals .
How can we make this page better?
Legal
Vendor terms and conditions
Content disclaimer
Delivery details
Helm chart (Amazon EKS)
- Amazon EKS
Helm chart
Helm charts are Kubernetes YAML manifests combined into a single package that can be installed on Kubernetes clusters. The containerized application is deployed on a cluster by running a single Helm install command to install the seller-provided Helm chart.
Version release notes
Signals 1.6.0. Cron-scheduled collection, flexible duration units (d/w), date-partitioned S3 snapshot delivery, enforced specification/test gates, and the EKS add-on configuration schema. Upgrades preserve /data (instance identity, collection history, incremental watermarks); migrations are forward-only.
Additional details
Usage instructions
Install the Elevarq Signals read-only PostgreSQL diagnostic collector via Helm on Amazon EKS. 1) Authenticate Helm to the Marketplace registry: aws ecr get-login-password --region us-east-1 | helm registry login --username AWS --password-stdin 709825985650.dkr.ecr.us-east-1.amazonaws.com. 2) Create an encrypted EBS-CSI StorageClass (for example signals-gp3) so the collector local snapshot store is durable across pod replacement. 3) Write a values file setting target.host (your RDS endpoint), target.user, target.dbname, target.authMethod (aws_rds_iam for passwordless RDS IAM), target.sslmode to verify-full, and persistence.storageClass to your StorageClass. 4) Install: helm install signals oci://709825985650.dkr.ecr.us-east-1.amazonaws.com/elevarq/elevarq-signals-chart --version 1.6.0 -n signals --create-namespace -f values.yaml. 5) Wait for the PVC to be Bound and the deployment to roll out. Credentials are never stored; passwordless RDS IAM uses an IRSA role granted rds-db:connect, with GRANT rds_iam and pg_monitor to the signals role in PostgreSQL. Upgrades preserve collection history and instance identity; see the chart README and docs/upgrading.md.
Resources
Vendor resources
Support
Vendor support
Community support via GitHub Issues at https://github.com/Elevarq/Signals . Report security vulnerabilities to security@elevarq.com (see SECURITY.md).
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.