Overview
Kestryl Cockpit for Canada PIPEDA is a web console over the PIIScan engine that shows how PII discovery and reporting for PIPEDA and provincial privacy laws work end to end, using a certified synthetic Canada dataset already installed in the image. The product is free to use on AWS Marketplace.
What is included in the AMI:
- Kestryl Cockpit served by nginx over HTTPS at https:///canada/
- A certified synthetic Canada dataset, preinstalled (dummy values only, no real personal data)
- A signed dataset license preinstalled at /etc/piiscan/edition.license (no license signing key or signing tool is included in the image)
- Dry-run PII discovery scans of the certified dataset, with findings shown in Cockpit
- First-administrator setup protected by a one-time bootstrap token printed to the instance console
- Self-signed TLS by default, or bring your own certificate with TLS_CERT_PEM and TLS_KEY_PEM
Scope of this AMI:
- The engine scans the certified synthetic dataset shipped in the image. The dataset, schema, and scan configuration are fixed; if they change, Cockpit shows the engine refusal message.
- To scan your own data sources, contact Pacific Data Integrators using the seller contact on this listing about the PDI standard build. Do not send production data to PDI unless a separate agreement says so.
Network:
- Open 443/tcp to reach Cockpit. Port 22/tcp is optional, from your admin CIDR only.
- Do not open 8503; the app binds to 127.0.0.1 only.
Highlights
- Free, ready-to-run PIPEDA PII discovery console with a certified synthetic Canada dataset preinstalled
- Cockpit over HTTPS at /canada/ on port 443, with token-protected first-admin setup and optional bring-your-own TLS
- Hardened RHEL 9 image; no license signing key in the image and the app binds to localhost behind nginx
Details
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
Pricing
Vendor refund policy
This product is free of charge; no seller fees apply, so no refund is applicable. AWS infrastructure charges are billed by AWS. Contact: https://pacificdataintegrators.com/contact-pdi
How can we make this page better?
Legal
Vendor terms and conditions
Content disclaimer
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Version 1.0.2-canada. RHEL 9 based AMI with Kestryl Cockpit for Canada PIPEDA served over HTTPS at /canada/. The boot volume is unencrypted for Marketplace ingestion, and no SSH authorized_keys are left in the image. Includes the certified synthetic Canada dataset and token-protected first-administrator setup.
Additional details
Usage instructions
- Launch the AMI (recommended t3.large) with a security group allowing 443/tcp, and 22/tcp only from your admin IP.
- Connect with SSH as ec2-user if needed, or read the instance console output (EC2 > Instance > Actions > Monitor and troubleshoot > Get system log) to find the one-time FIRST-ADMIN BOOTSTRAP TOKEN. It is also stored at /var/lib/kestryl/canada/KC_SETUP_TOKEN.
- Open https://<public-dns>/canada/ in a browser. Accept the self-signed certificate, or supply your own with TLS_CERT_PEM and TLS_KEY_PEM before first boot.
- Enter the bootstrap token and create the first administrator account.
- Start a dry-run scan of the preinstalled certified dataset and review the findings in Cockpit.
- Troubleshooting: sudo systemctl status kestryl-canada nginx and /var/lib/kestryl/FIRSTBOOT-STATUS.
Resources
Vendor resources
Support
Vendor support
Kestryl Cockpit for Canada PIPEDA is provided free by Pacific Data Integrators (PDI). For help with launching the AMI, the first-admin token, TLS, or license messages, contact PDI at https://pacificdataintegrators.com/contact-pdi . Common checks: allow 443/tcp in the security group (not 8503), run sudo systemctl status kestryl-canada nginx, and review /var/lib/kestryl/FIRSTBOOT-STATUS. To scan your own data sources, ask PDI about the standard build.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.