Examkin

Question

Difficulty: EasyAWS Elastic Disaster Recovery

A SysOps Administrator is deploying the AWS Replication Agent on an on-premises server to configure replication with AWS Elastic Disaster Recovery (AWS DRS). The installation fails because the AWS credentials provided do not have the permissions necessary to register the source server. Which configuration will resolve this issue and allow the Replication Agent to successfully register the server?

  1. Attach the AWSElasticDisasterRecoveryAgentInstallationPolicy managed policy to the IAM user whose credentials are used for installation.Answer
  2. B
    Configure the IAM user policy to include iam:PassRole permissions to allow the agent to assume the AWS DRS service-linked role directly.
  3. C
    Create a Route 53 failover routing policy that maps the replication agent endpoints to the primary DRS staging area.
  4. D
    Enable versioning on the destination S3 bucket to act as the primary target for replication logs.

Answer

Attach the AWSElasticDisasterRecoveryAgentInstallationPolicy managed policy to the IAM user whose credentials are used for installation.
The correct answer is attaching the AWSElasticDisasterRecoveryAgentInstallationPolicy managed policy to the IAM user. During the installation of the AWS Replication Agent on a source server, credentials with this policy must be provided so that the agent can authenticate with AWS DRS, register the source server, and create the required replication resources in the staging area.

Step-by-Step Solution

1
Identify the authentication failure during the AWS Replication Agent installation.
Confirm that the IAM user credentials provided do not have the permissions to communicate with AWS DRS.
The Replication Agent requires specific permissions to register the server in the AWS Console.
2
Locate the AWS managed policy designed specifically for agent installation.
Identify AWSElasticDisasterRecoveryAgentInstallationPolicy as the policy containing the minimal required permissions.
Following the principle of least privilege, this managed policy allows the agent to register servers without granting excess permissions.
3
Attach the managed policy to the IAM user and re-run the agent installation script.
The agent successfully authenticates, registers the server, and starts initial replication.
The newly added permissions allow the script to register the server and initialize replication to the staging area.

Key Concept

AWS Elastic Disaster Recovery Agent Authentication
Rate this question

Topics

AWS Elastic Disaster Recovery

More questions from this topic