PostgreSQL 17 on Ubuntu 24.04 with pgbx built in: every database is backed up to your own S3 bucket (daily by default), new databases within a minute, and any of them restores with one command into a new database, even onto a new server. Free, open source (MIT).
Never lose your app's database. pgbx is an open-source (MIT) PostgreSQL extension that backs up every database on the server automatically: daily at 02:00 by default (keeping 14 backups, at most 90 days; both adjustable), and a new database gets its first backup within a minute. Backups are made with Postgres's own pg_dump and go to your S3 bucket, not to us. Restore with one command into a new database, never over the live one, even onto a new server. By default it also restores the latest backup into a scratch database every week (Sunday 04:00 UTC) and checks it; you can change or turn off that schedule.
This AMI runs PostgreSQL 17 (PGDG packages on Ubuntu 24.04) with pgbx installed and verified against its release checksums. Launch it in your VPC and give the instance an IAM role with access to your S3 bucket: S3 access uses that instance role (no keys anywhere), the instance accepts IMDSv2 only, and shell access is through SSM Session Manager (no open SSH port). At first boot each instance generates its own postgres password (readable only by root), a TLS certificate, and access limited to your VPC over TLS.
Check backups any time with pgbx status; pgbx doctor explains anything that is not ok. pgbx itself is tested on PostgreSQL 13-18; this AMI ships 17.
Includes PostgreSQL 17 (PostgreSQL Licence) and pgbx (MIT), preinstalled; licences and notices: /opt/pgbx/THIRD-PARTY-NOTICES on the instance.
No outbound calls except to your S3 bucket and any alert channel you configure; no telemetry. pgbx is free and open source (MIT).
Highlights
Every database backed up to your own S3 bucket (daily by default), a new database within a minute; plain pg_dump files you own.
One-command restore into a new database, never over the live one, even onto a new server; a weekly restore check by default.
Secure by default: instance-role S3 access (no keys), IMDSv2 only, TLS, VPC-only access, no open SSH. Free and open source (MIT).
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
The software itself is free; you pay only for the AWS EC2 compute hours it runs on. Pricing is organized by instance type, and you choose the size that fits your workload. The t3.small, t3.medium, and t3.large options are burstable general-purpose instances that scale up in size. The m6i.large and m6i.xlarge are fixed-performance general-purpose instances. The r6i.large and r6i.xlarge are memory-focused instances for larger databases. Each dimension bills per hour the instance runs, so your cost scales with runtime and the size you pick.
Top-of-mind questions for buyers
Am I charged for the software when an instance is stopped or powered off?
The software is free, so there are no software charges at all. You pay only for AWS EC2 compute while an instance runs. A stopped or powered-off instance accrues no compute hours. Underlying AWS storage fees may still apply to attached volumes while the instance is stopped.
What does one hour of each instance type actually get me?
Each dimension bills one hour of a specific AWS EC2 instance size. The t3 options (small, medium, large) are burstable general-purpose instances. The m6i options (large, xlarge) give fixed general-purpose performance. The r6i options (large, xlarge) focus on memory for larger databases. You pick the size that fits your database.
What is included for free, and what do I pay the vendor for separately?
The pgbx extension and CLI are free and open source under the MIT licence, with scheduled backups to your own S3 bucket, restore tests, point-in-time restore, encryption, and retention rules. The vendor charges separately for people's time: installation, support, and training, arranged directly with them.
deemwar.com
Helpful?
Vendor refund policy
pgbx is free, so there is nothing to refund. Questions: admin@deemwar.com.
How can we make this page better?
Tell us how we can improve this page, or report an issue with this product.
Give us feedbackReport a problem with this product or seller
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA).
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
pgbx v0.6.1 on PostgreSQL 17.11 (Ubuntu 24.04, x86_64), everything preinstalled. Tested with all internet egress blocked: first boot ok, a real backup to S3 and a restore with matching row count and checksum, zero downloads at first boot.
Additional details
Usage instructions
FIRST BOOT (about 1 minute): PostgreSQL 17 and pgbx v0.6.1 are preinstalled in this AMI. First boot creates a random postgres password, a TLS certificate and pg_hba rules (your VPC only, TLS only), then verifies. Status: /root/pgbx-ami/status ("ok: pgbx ready"), details in /root/pgbx-ami/verify.txt.
CONNECT: use AWS Systems Manager Session Manager (attach an instance role with AmazonSSMManagedInstanceCore); no SSH port needs to be open. Password (shown only on the instance): sudo cat /root/pgbx-ami/postgres-password
From inside your VPC: psql "host=<instance private IP> user=postgres sslmode=require"
BACKUPS TO YOUR S3 BUCKET: give the instance role read/write access to your bucket, then EITHER launch with user data
PGBX_S3_BUCKET=<your bucket>
PGBX_S3_REGION=<its region>
OR run once: sudo pgbx setup server --credentials aws-default --s3-bucket <bucket> --s3-region <region> --server-name <instance id> --s3-endpoint https://s3.<region>.amazonaws.com --yes
Credentials come from the instance role (IMDSv2); no keys are stored. Each instance writes to its own folder in the bucket.
DEFAULTS: every database is backed up daily at 02:00, keeping 14 backups (at most 90 days); a new database gets its first backup within a minute; a restore check runs weekly (Sunday 04:00 UTC). All adjustable.
BACKUP NOW: psql -d <db> -c "SELECT pgbx.backup_now()"
RESTORE (into a NEW database, never over the live one): psql -d <db> -c "SELECT pgbx.restore(into_db => '<new name>')"
NETWORK: no outbound calls except to your S3 bucket and any alert channel you configure; no telemetry. Open port 5432 only to your own network.
NOTICES: /opt/pgbx/THIRD-PARTY-NOTICES (licences, and the source of the one MPL-2.0 library).
Support
Vendor support
Email io@deemwar.com (business days). pgbx is free and open source (MIT).
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
In-tenant malware scanning for Amazon S3, EBS, EFS, and FSx. Scan files on upload, at rest, or via API with multi-engine detection, automated quarantine, and large multi TB file support.
pg-cdc streams PostgreSQL changes into query-ready Parquet and Iceberg tables on S3 - no Kafka required. Deploys as a container in your AWS account so data never leaves your environment.
SimpleBackups offers automated, secure, and reliable cloud backup and recovery solutions designed for businesses of all sizes. Our platform ensures seamless data protection with features like automated backups, easy recovery, and robust encryption. Simplify your cloud data management with SimpleBackups.
Be the first to review this product. We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.