An enterprise needs to migrate 1.2\text{ PB} of unstructured data from an on-premises NFSv… — AWS Certified Solutions Architect - Professional

An enterprise needs to migrate $1.2\text{ PB}$ of unstructured data from an on-premises NFSv4 file system to an Amazon FSx for NetApp ONTAP file system. The target file system is located in the company's production AWS account (Account B), while all migration operations must be initiated and managed from a dedicated migration account (Account A). The migration must be completed within a strict window of $30\text{ days}$ . The enterprise has a dedicated $300\text{ Mbps}$ AWS Direct Connect connection available for the migration. All migrated data must be encrypted at rest using a Customer Managed Key (CMK) to satisfy security requirements.

Which of the following actions should the Solutions Architect take to complete this migration within the required timeline? (Select TWO.)

Order multiple AWS Snowball Edge Storage Optimized devices in the migration account (Account A). Copy the NFSv4 data to the devices on-premises, and ship them to AWS to import the data into an Amazon S3 staging bucket in Account A encrypted with a Customer Managed Key (CMK).Answer
Create an AWS DataSync task in the destination account (Account B) with the source pointing to the Amazon S3 staging bucket in Account A and the destination pointing to the Amazon FSx for NetApp ONTAP file system. Configure the staging S3 bucket policy and the Customer Managed Key (CMK) policy in Account A to grant read permissions to the DataSync execution role in Account B.Answer
C
Deploy AWS DataSync agents on-premises, and configure a DataSync task to transfer the NFSv4 data directly to the Amazon FSx for NetApp ONTAP file system in Account B over the $300\text{ Mbps}$ Direct Connect connection using TLS encryption.
D
Order multiple AWS Snowball Edge Storage Optimized devices in the migration account (Account A). Configure the jobs to use the default AWS-managed KMS key (`aws/s3`) for S3 encryption, and import the data directly into the Amazon S3 staging bucket in Account A.
E
Deploy AWS Transit Gateway to connect the on-premises environment to both AWS accounts. Configure an AWS DataSync agent on-premises to copy data over the Direct Connect connection to a Transit Gateway VPC attachment in Account B, enabling parallel streams to accelerate the transfer to the Amazon FSx for NetApp ONTAP file system.

Answer

Order multiple AWS Snowball Edge Storage Optimized devices in the migration account (Account A) to import data into an S3 staging bucket encrypted with a Customer Managed Key (CMK), and create an AWS DataSync task in the destination account (Account B) to copy the data from the S3 bucket to the FSx for NetApp ONTAP file system, configuring the S3 bucket and CMK policies to allow cross-account access.

The correct architecture requires using AWS Snowball Edge Storage Optimized devices to physically ship the

1.2\text{ PB}

of data to AWS, importing it into a staging S3 bucket in Account A. Because the destination FSx file system is in Account B, a cross-account AWS DataSync task must be created in Account B. To enable this, the staging S3 bucket must be encrypted using a Customer Managed Key (CMK) in Account A, and the key policy must grant read/decrypt permissions to the DataSync execution role in Account B.

Step-by-Step Solution

Calculate the transfer time over the network link to determine the viability of online migration.

Transferring

1.2\text{ PB}

over

300\text{ Mbps}

requires at least

370\text{ days}

, indicating that an offline migration with AWS Snowball Edge is required to meet the

30

-day window.

To evaluate the feasibility of online versus offline data transfer paths.

Identify the encryption requirements for cross-account data consumption.

The AWS Snowball Edge jobs must use a Customer Managed Key (CMK) rather than an AWS-managed key, as only CMK key policies can be modified to allow cross-account access.

To ensure that Account B's resources can access and decrypt Account A's staging S3 bucket objects.

Select the correct cross-account data movement method from the staging bucket to the final destination.

An AWS DataSync task is created in Account B with cross-account access configured on the staging S3 bucket in Account A, writing directly to the Amazon FSx for NetApp ONTAP file system.

To safely and efficiently copy data from Amazon S3 to FSx for NetApp ONTAP across accounts.

Key Concept

Selecting online vs. offline migration paths under strict network bandwidth constraints, and configuring secure cross-account data ingestion using KMS Customer Managed Keys and AWS DataSync.

Question

Answer

Step-by-Step Solution

Key Concept

Common Mistakes

Topics

More questions from this topic