Baffle Shield for Postgres Static Data Masking to Lower Environments
Baffle, Inc.
Price: Typical Total Price$3.504/hrTotal pricing per instance for services hosted on r6i.2xlarge in US East (N. Virginia). View Details
Free TrialProduct Overview
Baffle is the only security platform that cryptographically protects data as it's created, used, and shared across cloud-native data stores.Baffle Shield for Postgres Static Data Masking is specifically designed to copy and obfuscate sensitive production databases into development, testing, and DevOps lower environments. Eliminate the security and compliance issues with sensitive data in your pre-production environments.Baffle Shield is a proxy placed in-line between your production and pre-production databases and operates on the SQL commands. Use AWS DMS or native Postgres tools like pg_dump or pg_replication for migration (one-time or continuous updates)Format Preserving Encryption (FPE) protects data while preserving the original data type and length. This is critical for testing applications without modification as well as testing infrastructure for processing, storage, and bandwidth requirements. No corresponding token vault is required, eliminating the need to manage and secure that or worry about related performance issues. The data can be restored later if desired or the encryption key can be destroyed to ensure the data is never recovered. Envelope encryption ensures that Baffle software never has access to your key encryption keys (KEK), enabling you to bring your own keys (BYOK) in AWS KMS.Both source and target databases must be PostgreSQL (AWS EC2, RDS, or Aurora RDS). .Note! Baffle Manager is a web-based orchestration tool that configures, manages, and reports on Baffle Shields. Baffle Manager is free and also available in the AWS Marketplace.
Version: Baffle Shield Postgres 1.7.0.85
By: Baffle, Inc.
Categories: Security
Data Governance
Masking/Tokenization
Operating System
Linux/Unix, CentOS 7
Delivery Methods
Amazon Machine Image
Highlights: Proxy architecture enables data duplication and protection with no modifications to production or lower environments. Use AWS DMS or Postgres standard backup. One-time copies and/or continual updates. Tokenization using format preserving encryption (FPE) ensures security while maintaining the format and length of the original data. Applications and infrastructure do not need to be modified to continue working. There are no look-up tables or "vaults" to add management and security risks. Envelope encryption ensures that Baffle software never has access to your key encryption keys (KEK), enabling you to bring your own keys (BYOK) in AWS KMS.
Category: Infrastructure Software
Delivery Method: Amazon Machine Image
Company Information
Company Name: Baffle, Inc.
About Company: Baffle was founded to battle the increasing threats to enterprise assets in public and private clouds. Our team has strong backgrounds in encryption, security, cryptography, storage and enterprise infrastructure design. Baffle is pioneering a solution that makes data breaches irrelevant by keeping data encrypted from production through processing. Unlike other solutions that only encrypt data at-rest and in-flight, Baffle's solution keeps data encrypted while it is being processed by databases and applications.