A global digital publishing platform is designing a new high-throughput content management system (NoSQL and Object storage workloads). The system consists of:
1. A metadata database storing article configurations and user session states, which requires multi-region active-active writes and database write and read latencies under .
2. An asset repository storing millions of media files, which must be stored in Amazon S3 and replicated from the primary region () to a secondary disaster recovery region () with a strict recovery point objective (RPO) of .
All data must be encrypted at rest using Customer Managed Keys (CMKs). Cross-account access to the asset repository is required for a security audit application running in a dedicated audit account.
Which combination of database and storage configurations will meet these requirements? (Select TWO.)
- Configure Amazon DynamoDB global tables with replicas in us-west-2 and us-east-1. Encrypt the tables using regional Customer Managed Keys (CMKs) in each region.Answer
- Configure Amazon S3 Cross-Region Replication (CRR) with S3 Replication Time Control (S3 RTC) enabled. Encrypt the source and destination S3 buckets using Customer Managed Keys (CMKs), and update the KMS key policies and bucket policies to grant read access to the audit account's IAM role.Answer
- CConfigure Amazon S3 Cross-Region Replication (CRR) with S3 Replication Time Control (S3 RTC) enabled. Encrypt the S3 buckets using AWS managed keys (aws/s3), and configure the bucket policies to grant read access to the audit account's IAM role.
- DConfigure Amazon S3 Cross-Region Replication (CRR) without S3 Replication Time Control (S3 RTC) to replicate assets between regions, relying on standard replication to meet the 15-minute RPO at a lower cost.
- EDeploy an Amazon Aurora Global Database with the primary cluster in us-west-2 and a secondary cluster in us-east-1. Enable write forwarding on the secondary cluster to allow active-active writes in both regions with sub-10 millisecond write latency.