DataSunrise: Database Security and Compliance for Amazon RDS
DataSunrise is AWS Security Competency and Advanced Amazon APN Technology Partner in data and database security. Security is a shared responsibility between the cloud provider and the customer in the cloud: AWS manages the security of the cloud, and customers are responsible for managing security in the cloud. DataSunrise can help in protecting Amazon relational databases (RDS) thus helping companies to keep their data and databases secure in the cloud.
No duplicating of source database required
No additional amount of storage space required
No database or application modifications required
DataSunrise Web Console at a Glance
Logical web console designed to intuitively set and manage your database security and compliance policies
Download Free
Amazon RDS Database Security Key Benefits
At the moment Amazon supports all versions of the following relational databases:
The official policy of DataSunrise is to support all available Amazon RDS and any other Amazon databases to come using DataSunrise Database Security Suite which features the following convenient and effective tools:
- Audit. DataSunrise logs all Amazon RDS user actions, SQL queries and query results. DataSunrise Data Audit saves information on database users, user sessions, query code, etc. Data auditing results can be exported to an external system, such as SIEM.
- Security. DataSunrise analyzes database traffic, detects and blocks unauthorized queries and SQL injections on-the-fly. Alerts and reports on detected threats can be sent to network administrators or a security team (officer) via e-mails or instant messengers.
- Masking. DataSunrise prevents sensitive data exposure thanks to its data masking tool. DataSunrise’s Dynamic Masking obfuscates output of sensitive data from a database by replacing it with random data or real-looking data on-the-fly. The Static Masking feature replaces real data with a fake copy which enables you to create a fully protected testing and development environment out of your real production database.
DataSunrise is most effective when deployed in the proxy mode. When deployed in this configuration, DataSunrise works as an intermediary between a database server and its client applications. Thus it is able to process all incoming queries before redirecting them to and from a database server.
Integration with Amazon RDS is made even closer through integration with such Amazon native services as Cloud Watch and AWS Cloud Formation. DataSunrise can send custom metrics to Amazon’s Cloud Watch. This enables you to view DataSunrise-specific parameters such as memory volume used, performance level, etc. DataSunrise has a dedicated CF script to deploy automatically and seamlessly on Amazon Linux 2 and create an Auto Scaling group for the HA environment. The deployment process is automated and does not require manual Amazon WebService resources creation. DataSunrise’s Database Activity Monitoring includes the integration with RDS Database Activity Streams (DAS) as well.
Customizable Traffic Filtering
Creating granular security, audit, and compliance policies with modifiable traffic filters. Handle queries from certain users, client applications, hosts, and IP addresses as a single object, grouping them together.
Regulatory Compliance Automation
Accurately discover sensitive data to enforce security, masking, and auditing policies to meet certain compliance standards. Self-managing regulatory compliance automation requires no manual intervention.
Comprehensive Threat Detection
Real-time access and activity control to ensure malicious database activity identification, automatic detection and instant blocking of statements containing SQL injections.
Additional Authentication Methods
DataSunrise provides a secure authentication service for computer networks and supports Kerberos and LDAP authentication. All major operating systems, including Microsoft Windows, Linux, Apple OS X and Free BSD, support Kerberos protocol and LDAP.
Keep Your Amazon RDS Database Safe with DataSunrise
Request a DemoFind Your Unique Solution
1. Select Product Type
2. Select Supported Databases
- Activity Monitoring
- Database Firewall
- Data Masking
- Performance Monitoring
- Sensitive Data Discovery
