Baffle Config file examples for Snowflake AWS deployments

Example BaffleCommonConfig

The following is an example BaffleCommonConfig file configured for Snowflake AWS deployment.

deploymentType=aws
bsKeystore=
bsKeyCreate=true
bsWorkloadConfig=9
bsSSL=false
bsTruststorePassword=
bsKeystorePassword=
tier=0
bsEnableWorkload=false
bsDBServerHost=targetdb
bsClientPort=8444
keyRefreshSeconds=43200
encType=ENC_DET
baffleShieldID=baffleID
rowLevelEncryption=false
bsServerPort=3306
bsTruststore=
bsDBServerUser=root
encMode=M_CTR
bsDBServerPassword=baffle
bsWorkloadProfile=false
useMarkers=true
sqlComments=OrgID:
entityIdInWhereClause=false
enableAnyEntityIdDecryption=false
debug=24
type=sdk
dbServerType=mysql
dbHierarchyLevels=3

Example KmsConfig.properties

The following is an example KmsConfig.properties file configured for Snowflake AWS deployment.

# LOCAL

#kmsType=local
#baffle_secret=EXAMPLESECRET

# AWS

#kmsType=awskms
#aws_secret_access_key=EXAMPLESECRETACCESSKEY
#aws_region=us-west-2
#aws_s3_bucket=example-snowflake-dekstore
#aws_access_key_id=EXAMPLEAWSACCESSKEY
#app_namespace=BaffleKeys-
#dekStore=s3
#aws_kms_alias=alias/exampe-snowflake

Example BafflePrivacyConfig

The following is an example BafflePrivacyConfig file configured for Snowflake AWS deployment.

format = "TOML"

# First database
[[database]]
  name = "dbo"
  [[database.table]]
    name = "superstore"
    [[database.table.column]]
      name = "city"
      type = "varchar"
      precision = 50
      key = 2
      encType = "ENC_DET"
      encMode = "fpe-alphanum"
      nullable = false
    [[database.table.column]]
      name = "customerid"
      type = "varchar"
      precision = 20
      key = 2
      encType = "ENC_DET"
      encMode = "fpe-alphanum"
      nullable = false
    [[database.table.column]]
      name = "customername"
      type = "varchar"
      precision = 100
      key = 2
      encType = "ENC_DET"
      encMode = "fpe-alphanum"
      nullable = false
    [[database.table.column]]
      name = "sales"
      type = "int"
      key = 2
      encType = "ENC_DET"
      encMode = "fpe-int"
      nullable = false

# Second database
[[database]]
  name = "sample"
  [[database.table]]
    name = "agents"
  [[database.table.column]]
    name = "phone_no"
    type = "varchar"
    precision = 15
    key = 2
    encType = "ENC_DET"
    encMode = "fpe-decimal"