Examkin

Question

Difficulty: HardDatabase and Storage Strategy

A financial services company is designing a new multi-region web portal that spans two AWS accounts (Account A in us-east-1 and Account B in us-west-2). The workload type is an OLTP database for user sessions and Object storage for secure audit logs. The system must support active-passive disaster recovery with a recovery time objective (RTO) of less than 1 minute1\text{ minute} and a recovery point objective (RPO) of less than 1 second1\text{ second}. Audit logs generated in Account A must be stored in Amazon S3 in Account A and instantly replicated to a centralized auditing bucket in Account B. Read scaling must be supported on the database in the primary region to handle sudden traffic spikes without affecting write throughput. Which two database and storage designs should a Solutions Architect implement to meet these requirements? (Select TWO.)

  1. Deploy Amazon Aurora PostgreSQL in us-east-1 with Aurora Replicas, and configure Aurora Auto Scaling to dynamically adjust reader replicas based on metric thresholds.Answer
  2. Configure Amazon S3 cross-account replication from Account A to Account B, using a customer managed key (CMK) in AWS KMS to encrypt the objects, and allow the replication role access to the CMK in Account A and the target bucket policy in Account B.Answer
  3. C
    Deploy Amazon RDS for PostgreSQL in us-east-1 with a Multi-AZ standby deployment, and configure the client application to balance read queries across the standby node to handle peak traffic.
  4. D
    Implement AWS Backup with cross-region backup copy enabled from us-east-1 to us-west-2, scheduling backup copies every 24 hours24\text{ hours} to support disaster recovery.
  5. E
    Configure Amazon S3 cross-account replication using the default AWS managed key (aws/s3) in Account A to encrypt the objects, and allow the Account B IAM role to access this key by updating the bucket policy in Account B.

Answer

Deploy Amazon Aurora PostgreSQL in us-east-1 with Aurora Replicas and configure Aurora Auto Scaling, while configuring Amazon S3 cross-account replication from Account A to Account B using a Customer Managed Key (CMK) in AWS KMS.
Deploying Amazon Aurora PostgreSQL with reader scaling satisfies the requirement to handle read spikes independently from write throughput. Additionally, setting up S3 cross-account replication with a Customer Managed Key (CMK) enables secure replication across different accounts by allowing customization of the key policy for external account access.

Step-by-Step Solution

1
Evaluate the database read scaling requirements in the primary region.
Identify that standard RDS Multi-AZ standby deployments do not support read queries, whereas Amazon Aurora PostgreSQL supports multiple active Aurora Replicas that scale horizontally.
Ensures read spikes are handled efficiently without degrading write throughput.
2
Evaluate the recovery point objective (RPO) for the disaster recovery strategy.
Determine that a daily backup copy strategy provides an RPO of 24 hours24\text{ hours}, which is insufficient for the sub-second RPO requirement.
Filters out backup-restore methods in favor of live replication.
3
Analyze cross-account S3 replication encryption requirements.
Determine that AWS-managed KMS keys cannot be shared cross-account, meaning a customer managed key (CMK) with appropriate key policy delegation is required.
Allows S3 replication to successfully decrypt and replicate objects to the destination bucket in another account.

Key Concept

Selecting appropriate database and storage patterns to meet scalability, cross-account security, and RTO/RPO objectives.
Rate this question

Topics

Database and Storage Strategy

More questions from this topic