Examkin

Question

Difficulty: HardDatabase and Storage Strategy

A financial technology startup is designing a global payment processing platform. The platform requires a multi-region database and storage strategy across us-east-1 (primary) and us-west-2 (secondary). The requirements include:

* A transactional ledger database (OLTP) that requires a Recovery Time Objective (RTO) of less than 1 minute and a Recovery Point Objective (RPO) of less than 5 seconds.
* A user session store (NoSQL) that must support active-active low-latency writes and reads in both regions.
* Transaction receipt images stored in Amazon S3 must be replicated to the secondary region and remain accessible to an audit team operating in a separate AWS account.

Which combination of AWS database and storage configurations will meet these requirements? (Select TWO.)

  1. Deploy Amazon Aurora Global Database for the transactional ledger, and use Amazon DynamoDB global tables to store user session data.Answer
  2. Configure Amazon S3 Cross-Region Replication (CRR) for transaction receipts using a Customer Managed Key (CMK) in AWS KMS, updating the KMS key policy in the primary account to delegate access to the audit account's role.Answer
  3. C
    Deploy Amazon RDS Multi-AZ DB clusters in both regions and configure AWS Database Migration Service (DMS) for bi-directional replication to meet RTO and RPO requirements.
  4. D
    Configure Amazon S3 Cross-Region Replication (CRR) for transaction receipts using the AWS-managed KMS key (aws/s3) and use S3 bucket policies to grant read permissions to the audit account role.
  5. E
    Use Amazon DynamoDB in a single region and configure AWS Resource Access Manager (RAM) to share the user session tables between the primary and secondary regions to achieve active-active capability.

Answer

To meet the requirements, the startup must deploy Amazon Aurora Global Database for the transactional ledger, use Amazon DynamoDB global tables for the active-active user session store, and configure Amazon S3 Cross-Region Replication (CRR) using a Customer Managed Key (CMK) with cross-account access delegated via its key policy.
The correct options involve deploying Amazon Aurora Global Database for the OLTP ledger and Amazon DynamoDB global tables for the session store, combined with S3 Cross-Region Replication using a KMS Customer Managed Key (CMK) for the receipts. Aurora Global Database uses storage-level physical replication to secondary regions, maintaining lag under a second, which allows for RPO under 5 seconds and RTO under a minute upon promotion. DynamoDB global tables offer active-active replication to provide local read and write latencies in multiple regions. Furthermore, S3 Cross-Region Replication using a Customer Managed Key allows the key policy to be customized, which is necessary to grant cross-account decryption rights to the external audit team.

Step-by-Step Solution

1
Evaluate OLTP requirements.
Identify that Amazon Aurora Global Database replicates storage at the physical layer with lag typically under 1 second, providing RPO < 5 seconds. Promoting a secondary region takes less than 1 minute, meeting RTO requirements.
Standard RDS replication or DMS replication does not guarantee the required sub-minute RTO and sub-5-second RPO at the database layer.
2
Evaluate NoSQL requirements.
Identify that Amazon DynamoDB global tables provide fully managed active-active replication with local read/write capabilities.
Single-region tables with resource sharing or other workarounds do not support low-latency active-active performance.
3
Evaluate cross-account storage encryption and replication.
Determine that Amazon S3 Cross-Region Replication (CRR) with Customer Managed Keys (CMK) is required to allow key policy modifications for cross-account KMS key delegation.
AWS-managed KMS keys (aws/s3) do not support policy modification and cannot be shared with external audit accounts.

Key Concept

Designing a secure, high-performing, and resilient multi-region database and storage architecture using Aurora Global Database, DynamoDB Global Tables, and S3 Cross-Region Replication with KMS Customer Managed Keys.
Rate this question

Topics

Database and Storage Strategy

More questions from this topic