A software publisher distributes installer packages globally. The primary files are stored in an Amazon S3 bucket in the us-west-2 Region, and a backup replica is maintained in an S3 bucket in the eu-central-1 Region. The publisher requires a content delivery solution that ensures high availability and low latency for downloads, even if the primary S3 bucket becomes temporarily unavailable. The solution must minimize operational overhead. Which configuration should a solutions architect recommend to meet these requirements?
- AConfigure Amazon Route 53 with latency-based routing policies pointing to both Amazon S3 buckets. Attach Route 53 health checks to the S3 bucket endpoints to enable automatic failover to the secondary region if the primary bucket is unhealthy.
- Configure an Amazon CloudFront distribution with an origin group containing the primary S3 bucket as the primary origin and the backup S3 bucket as the secondary origin. Configure origin failover based on specific HTTP status codes such as 500, 502, 503, or 504.Answer
- CConfigure an Amazon CloudFront distribution with the primary S3 bucket as the origin. Configure AWS WAF with custom rules to monitor origin health and dynamically rewrite requests to point to the backup S3 bucket if the primary bucket is unreachable.
- DConfigure an Amazon CloudFront distribution with the primary S3 bucket as the origin. Set the default Time to Live (TTL) values to 0 seconds on all cache behaviors to force CloudFront to query a Route 53 active-passive failover record set on every client request.
Answer
Configure an Amazon CloudFront distribution with an origin group containing the primary S3 bucket as the primary origin and the backup S3 bucket as the secondary origin. Configure origin failover based on specific HTTP status codes such as 500, 502, 503, or 504.
The correct configuration utilizes Amazon CloudFront origin groups to achieve both low-latency content delivery and high availability. By grouping the primary Amazon S3 bucket (in us-west-2) and the backup S3 bucket (in eu-central-1) into an origin group, CloudFront can automatically fail over to the backup origin when the primary origin returns specific HTTP status codes (such as 500, 502, 503, or 504). This provides seamless, resilient content delivery with minimal latency and zero manual intervention or complex routing overhead.
Step-by-Step Solution
Key Concept
Amazon CloudFront Origin Groups and Origin Failover
Estimated Time:1m 30s