Question

Difficulty: HardResilient Database Configurations and High Availability

A financial technology company is deploying a transaction processing system on AWS. The application uses an Amazon RDS for PostgreSQL database. To meet regulatory compliance, the database architecture must achieve a Recovery Point Objective (RPO) of zero (no data loss) and a Recovery Time Objective (RTO) of less than 35 seconds for any single Availability Zone failure within the primary AWS Region. The application also requires local read scaling within the primary Region to handle reporting queries without affecting write transaction throughput. Which database configuration satisfies these resilience and scalability requirements with the lowest RTO?

  1. A
    Deploy a Single-AZ DB instance with two Read Replicas in different Availability Zones, and configure an AWS Lambda function to promote a Read Replica to primary if the main instance fails.
  2. Deploy the database as an Amazon RDS Multi-AZ DB cluster with one writer and two readable standby DB instances across three Availability Zones.Answer
  3. C
    Deploy two independent Single-AZ DB instances in different Availability Zones, configure bidirectional database replication, and use an Amazon Route 53 latency routing policy with health checks to route traffic.
  4. D
    Deploy a standard Amazon RDS Multi-AZ DB instance with a standby in a second Availability Zone, and configure a cross-Region Read Replica to handle local reporting queries.

Answer

Deploy the database as an Amazon RDS Multi-AZ DB cluster with one writer and two readable standby DB instances across three Availability Zones.
Deploying an Amazon RDS Multi-AZ DB cluster satisfies all constraints. It uses semi-synchronous replication to guarantee an RPO of zero (no data loss) if at least one standby acknowledges the write. Its architecture enables automatic failovers that typically complete in under 35 seconds, meeting the strict RTO target. Furthermore, it allows read traffic to be routed to the two standby DB instances, providing native local read scaling within the primary Region.

Step-by-Step Solution

1
Analyze the RPO requirement.
An RPO of zero requires synchronous or semi-synchronous database replication so that no acknowledged transactions are lost during an Availability Zone failure.
Asynchronous replication mechanisms, such as standard RDS Read Replicas, can lead to data loss during failover and do not guarantee an RPO of zero.
2
Analyze the RTO requirement.
An RTO of less than 35 seconds requires an automated failover mechanism that promotes a backup instance immediately without manual intervention or script execution delays.
Standard Multi-AZ DB instance deployments typically failover in 60 to 120 seconds, which is too slow. Multi-AZ DB clusters feature transaction-routing mechanisms that achieve failovers in under 35 seconds.
3
Evaluate the read scalability requirement.
The configuration must support readable standby instances or replicas within the same Region to offload reporting queries.
A Multi-AZ DB cluster allows the two standby instances to serve read traffic, satisfying local read scaling natively, whereas standard Multi-AZ DB instances do not allow reading from the standby.

Key Concept

Amazon RDS Multi-AZ DB Cluster Deployments vs Multi-AZ DB Instance Deployments
Rate this question