A company is designing a high availability and disaster recovery architecture for a critical logistics fleet tracking application. The application runs on Amazon EC2 instances in private subnets behind an Application Load Balancer (ALB) in a primary VPC in us-east-1. The database layer uses Amazon Aurora PostgreSQL with auto-scaled Aurora Replicas for read queries. Private EC2 instances must access external mapping APIs via a NAT Gateway. The design must support a secondary VPC in us-west-2 for disaster recovery. The solution must achieve a Recovery Point Objective (RPO) of 15 minutes, a Recovery Time Objective (RTO) of 1 hour, and minimize operational costs. Which two actions should the solutions architect take to meet these requirements?
- Configure Amazon Aurora Global Database to replicate data from the primary VPC in us-east-1 to the secondary VPC in us-west-2, and provision a low-cost, scaled-down Aurora Replica in us-west-2.Answer
- Configure Amazon Route 53 with an active-passive failover routing policy, using Route 53 health checks tied to the primary ALB to automatically redirect public traffic to the secondary ALB during a failover event.Answer
- CMaintain a single NAT Gateway in one Availability Zone of the primary Region, and configure all private subnets across both Availability Zones to route outbound internet traffic through this single gateway to minimize hourly charges.
- DUse AWS Backup to create daily snapshots of the database, copy them to the secondary Region, and restore the database to a new cluster in the secondary Region during a disaster recovery event.
- EDeploy an Amazon RDS PostgreSQL database in a Multi-AZ configuration in the primary Region, and configure the application to send read-heavy traffic to the standby instance in the secondary Availability Zone to scale read capacity.
- FCreate a Route 53 Private Hosted Zone in the us-west-2 VPC to resolve the database's regional endpoint, without associating it with the primary us-east-1 VPC, and use it to route application database traffic.
Answer
Configure Amazon Aurora Global Database with a scaled-down replica in the secondary Region, and set up Route 53 active-passive failover routing with health checks pointing to the Application Load Balancers.
To meet the RPO of 15 minutes, database replication must be fast and reliable. Amazon Aurora Global Database provides sub-second replication latency to a secondary Region, and using a scaled-down instance class minimizes running costs while meeting the objectives. To meet the 1-hour RTO, DNS failover must be automated. Amazon Route 53 active-passive failover with health checks automatically detects a primary region failure and redirects traffic to the secondary Application Load Balancer.
Step-by-Step Solution
Key Concept
Disaster Recovery strategies (Warm Standby/Pilot Light) require low-latency replication for short RPOs and automated DNS routing failover for low RTOs.