An enterprise needs to migrate 450\text{ TB} of historical compliance records from an on-p… — AWS Certified Solutions Architect - Professional

An enterprise needs to migrate $450\text{ TB}$ of historical compliance records from an on-premises SFTP server to Amazon S3. The migration must be completed within $25\text{ days}$ . The enterprise has a dedicated $200\text{ Mbps}$ network connection to AWS. Legacy applications must continue to access the records using the SFTP protocol without code modifications. Corporate auditing standards mandate that all data at rest must be encrypted using a customer managed key (CMK) in AWS KMS. Which two options should the solutions architect select to meet these requirements?

Order AWS Snowball Edge Storage Optimized devices, configure them with an on-premises import job utilizing a customer managed key (CMK) for encryption, copy the initial $450\text{ TB}$ dataset to the devices, and ship them back to AWS.Answer
Create an AWS Transfer for SFTP endpoint backed by Amazon S3 configured to use the customer managed key (CMK) for encryption, deploy an AWS DataSync agent on-premises to sync changes made during shipping, and transition client connections to the new SFTP endpoint.Answer
C
Deploy AWS DataSync agents on-premises to transfer the $450\text{ TB}$ dataset directly over the $200\text{ Mbps}$ network connection to Amazon S3, using the customer managed key (CMK) to encrypt data in transit and at rest.
D
Order AWS Snowball Edge Storage Optimized devices using the default AWS managed key (aws/s3) for encryption to simplify cross-account sharing, copy the dataset, ship them back to AWS, and configure an AWS Storage Gateway File Gateway to serve SFTP clients.
E
Establish an AWS Direct Connect connection with a Transit Gateway and Direct Connect Gateway to configure transitive routing, then deploy AWS Transfer Family with an AS2 protocol endpoint to stream the $450\text{ TB}$ payload within the migration window.

Answer

The correct actions are to order AWS Snowball Edge Storage Optimized devices using a customer managed key for the bulk migration, and configure an AWS Transfer for SFTP endpoint backed by Amazon S3 while deploying an AWS DataSync agent to synchronize delta changes.

The solution requires a hybrid approach. The timeline constraint of

25\text{ days}

for

450\text{ TB}

of data makes an online-only transfer over a

200\text{ Mbps}

network connection mathematically impossible (~

208\text{ days}

). Therefore, the solutions architect must use AWS Snowball Edge Storage Optimized devices for the initial bulk data load. Using a customer managed key (CMK) is required to meet the auditing rules. To preserve SFTP protocol compatibility for legacy applications, AWS Transfer for SFTP backed by Amazon S3 is deployed. An AWS DataSync agent is used to synchronize the delta changes made on-premises during the Snowball shipment window, as the delta changes easily fit within the

200\text{ Mbps}

bandwidth.

Step-by-Step Solution

Calculate the time required to transfer the data over the network.

200\text{ Mbps}

, transferring

450\text{ TB}

of data takes over

208\text{ days}

, which exceeds the

25

-day limit. Thus, physical transport using AWS Snowball Edge is required for the initial load.

To verify whether an online or offline migration strategy is feasible within the given time constraint.

Apply compliance and key requirements to the bulk transfer.

Order AWS Snowball Edge Storage Optimized devices configured with an import job using a customer managed key (CMK) in KMS to ensure compliance with auditing standards.

To copy the bulk dataset securely and ensure that encryption is controlled via a custom-managed KMS key.

Ensure continuous protocol support and synchronization of delta changes.

Configure AWS Transfer for SFTP backed by Amazon S3 to provide compatibility for legacy applications, and deploy an AWS DataSync agent on-premises to sync active data updates during shipping and import.

To support the legacy SFTP clients without code changes and sync updates that occurred during the transit phase.

Key Concept

Selecting the correct hybrid migration tool based on network bandwidth limits, legacy protocol requirements, and encryption compliance standards.

Estimated Time:2m 0s

Question

Answer

Step-by-Step Solution

Key Concept

Common Mistakes

Topics

More questions from this topic