Overview
Baffle is the only security platform that cryptographically protects data as it's created, used, and shared across cloud-native data stores.
Baffle Shield for Postgres Multi-Tenant Data Security enables multi-tenant applications (such as SaaS) to use a single database for all their tenants yet logically isolate the data using encryption. Every row (record) is encrypted with a separate key.
Baffle Shield is a proxy placed in-line between your database and application. It operates on the SQL commands to encrypt and decrypt in real-time. Baffle Shield handles all the tenant-key mapping, so the application doesn't have to. This enables a no-code or low-code approach for fast and easy implementation.
Envelope encryption ensures that Baffle software never has access to your key encryption keys (KEK), enabling you to bring your own keys (BYOK) in AWS KMS.
Note! Baffle Manager is a web-based orchestration tool that configures, manages, and reports on Baffle Shields. Baffle Manager is free and also available in the AWS Marketplace.
Highlights
- Logical isolation of SaaS customer data in a single database enables the advantages of scale while also providing security and privacy that customers demand.
- Proxy-based architecture for no-code implementation minimizes impact to your applications and infrastructure but enables maximum flexibility to scale for performance and availability.
- Baffle handles the key-tenant mapping, but envelope encryption ensures that Baffle software never has access to your key encryption keys (KEK), enabling you to bring your own keys (BYOK) in AWS KMS.
Details
Typical total price
$3.504/hour
Pricing
Free trial
Instance type | Product cost/hour | EC2 cost/hour | Total/hour |
|---|---|---|---|
t2.large | $2.00 | $0.093 | $2.093 |
r6i.2xlarge Recommended | $3.00 | $0.504 | $3.504 |
r6i.16xlarge | $4.00 | $4.032 | $8.032 |
r6i.32xlarge | $5.00 | $8.064 | $13.064 |
Additional AWS infrastructure costs
Type | Cost |
|---|---|
EBS General Purpose SSD (gp2) volumes | $0.10/per GB/month of provisioned storage |
Vendor refund policy
30-day free trial. Refunds are handled on a case-by-case basis via support.
Legal
Vendor terms and conditions
Content disclaimer
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Initial Offering
Additional details
Usage instructions
Launch the Baffle Manager AMI on the EC2 or your choice. Ensure that your computer can access port 443 of the EC2 Open a browser and navigate to the EC2 IP address Configure Baffle Manager as per the instructions Setup a keystore Setup a database Create an application and note the SyncID Use the SyncID when launching a Baffle Shield so it can connect to Baffle Manager
Resources
Vendor resources
Support
Vendor support
Email support for setup, configuration, and usage issues. support@baffle.io support@baffle.io
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
