A healthcare software provider is deploying a patient management portal on AWS. The relational database backend must remain highly available even if an entire Availability Zone (AZ) suffers an outage. The database configuration must support a Recovery Point Objective () of (zero data loss) and a Recovery Time Objective () of less than seconds. Furthermore, the portal experiences frequent read-heavy spikes, requiring the ability to serve read queries directly from standby database nodes within the cluster to optimize performance. Which database architecture should a solutions architect recommend to meet these requirements?
- ADeploy two independent Single-AZ Amazon RDS DB instances in different Availability Zones, and configure Amazon Route 53 latency routing to distribute traffic between them.
- Deploy an Amazon RDS Multi-AZ DB cluster with one primary writer instance and two readable standby instances across three Availability Zones.Answer
- CDeploy a Single-AZ Amazon RDS DB instance and create two Read Replicas in different Availability Zones, configuring the application to promote a Read Replica to primary during a failure.
- DConfigure a Pilot Light disaster recovery strategy by maintaining a scaled-down Amazon RDS instance in a secondary Availability Zone and restoring data from daily backups during an outage.
Answer
Deploying an Amazon RDS Multi-AZ DB cluster with one primary writer instance and two readable standby instances across three Availability Zones is the correct configuration.
Deploying an Amazon RDS Multi-AZ DB cluster provides synchronous replication across three Availability Zones (ensuring RPO = 0) and automated failover that typically completes in under 35 seconds (meeting the RTO requirement). Crucially, unlike standard Multi-AZ DB instance deployments, the standby instances in a Multi-AZ DB cluster are readable, allowing the application to offload read traffic directly to them.
Step-by-Step Solution
Key Concept
Amazon RDS Multi-AZ DB clusters provide synchronous replication, fast automated failover, and active readable standby instances for scaling read traffic.
Estimated Time:1m 30s