Baffle Data Protection Services seamlessly protects your data inside AWS Relational Database Service (RDS) instances, Amazon Redshift and S3 buckets. The solution enables data-centric tokenization, de-identification, dynamic data masking, encryption and access control (RBAC) at the field or column-level without requiring any application code changes. Baffle integrates with AWS Key Management Services (KMS), CloudHSM, Database Migration Services (DMS), ECS Fargate, Secrets Manager and S3 to fully support your cloud native deployments. Baffle also supports a BYOK model for SaaS providers to enable tenant-specific encryption in a multi-tenant database using customer-owned keys. The solution has minimal performance overhead and has been proven at-scale in deployments with Fortune 50 customers.