A gaming company is designing a multiplayer game backend to store user profile states and matchmaking configurations. The primary infrastructure is located in the `us-east-1` Region, consisting of an Application Load Balancer (ALB), an Auto Scaling Group (ASG) of Amazon EC2 instances in private subnets, and an Amazon Aurora MySQL database cluster. To prepare for a regional outage, the company is designing a disaster recovery (DR) solution in the `us-west-2` Region. The DR solution must achieve a Recovery Time Objective (RTO) of less than minutes and a Recovery Point Objective (RPO) of less than minutes. The design must also minimize ongoing compute costs in the disaster recovery region. Which architecture meets these requirements?
- AConfigure an Amazon Aurora Global Database with the primary cluster in `us-east-1` and a secondary cluster in `us-west-2` containing a single reader instance. Deploy an ALB and an ASG in `us-west-2` with the capacity set to . Create a Route 53 Private Hosted Zone (PHZ) for internal database endpoint resolution and associate it with the VPCs in both regions. In both regions, deploy a single NAT Gateway in Availability Zone to route outbound private subnet traffic. Configure Route 53 Failover routing records with health checks pointing to the `us-east-1` ALB.
- BConfigure Amazon Aurora database backups in `us-east-1` and schedule copies of these snapshots to `us-west-2` every minutes. Deploy an ALB and an ASG in `us-west-2` with the capacity set to . Create a Route 53 Private Hosted Zone (PHZ) associated with the VPCs in both regions. Configure Route 53 Failover routing records with health checks pointing to the `us-east-1` ALB. Upon failover, restore the database in `us-west-2` from the latest copied snapshot, scale up the ASG in `us-west-2` to the required capacity, and update the database endpoint in the PHZ.
- Configure an Amazon Aurora Global Database with the primary cluster in `us-east-1` and a secondary cluster in `us-west-2` containing a single reader instance. Deploy an ALB and an ASG in `us-west-2` with the capacity set to . Create a Route 53 Private Hosted Zone (PHZ) for internal database endpoint resolution and associate it with the VPCs in both `us-east-1` and `us-west-2`. Configure Route 53 Failover routing records with health checks pointing to the `us-east-1` ALB, with the primary record targeting `us-east-1` and the secondary record targeting the `us-west-2` ALB. Upon failover, promote the secondary database cluster and scale up the ASG in `us-west-2`.Answer
- DConfigure an Amazon Aurora Global Database with the primary cluster in `us-east-1` and a secondary cluster in `us-west-2` containing a single reader instance. Deploy an ALB and an ASG in `us-west-2` with the capacity set to . Create a Route 53 Private Hosted Zone (PHZ) in `us-east-1` for database endpoint resolution, leaving it unassociated with the `us-west-2` VPC. Configure Route 53 Failover routing records with health checks pointing to the `us-east-1` ALB, with the primary record targeting `us-east-1` and the secondary record targeting the `us-west-2` ALB. Upon failover, promote the secondary database cluster and scale up the ASG in `us-west-2`.
Answer
The architecture that configures an Aurora Global Database, sets the secondary region's Auto Scaling Group capacity to , associates the Route 53 Private Hosted Zone with both region VPCs, and configures Route 53 Failover routing.
The correct architecture uses Amazon Aurora Global Database, which replicates data asynchronously to the secondary region with a typical latency of less than second, easily meeting the RPO of less than minutes. Setting the standby Auto Scaling Group's capacity to minimizes ongoing EC2 compute costs. Route 53 Failover routing correctly detects primary region degradation via health checks and automatically redirects traffic to the standby ALB. Once failover is initiated, the secondary database cluster is promoted to primary, and the ASG is scaled up, which can be accomplished well within the -minute RTO. Associating the Private Hosted Zone with VPCs in both regions ensures internal database endpoint resolution continues to work in the disaster recovery region.
Step-by-Step Solution
Key Concept
High Availability and Disaster Recovery Design for Multi-Region Architectures