Examkin

Question

Difficulty: MediumS3 Reliability and Replication

An organization is setting up Amazon S3 Cross-Region Replication (CRR) to copy objects from a source bucket in the us-east-1 Region to a destination bucket in the us-west-2 Region. A SysOps Administrator has created the destination bucket and configured the replication rule on the source bucket, specifying an IAM role for replication. However, new objects uploaded to the source bucket are not replicating. Which of the following actions must the SysOps Administrator perform to successfully enable replication? (Select TWO.)

  1. Enable S3 Versioning on both the source bucket and the destination bucket.Answer
  2. Grant the Amazon S3 service principal permissions to assume the IAM replication role, and configure the role's policy to permit replication actions.Answer
  3. C
    Enable S3 Versioning on the source bucket, and leave the destination bucket unversioned so that replicated objects are written without version IDs.
  4. D
    Attach an IAM policy to the administrator identity configuring replication that grants sts:AssumeRole permissions for the replication role, instead of the iam:PassRole permission.
  5. E
    Configure an S3 Lifecycle rule on the source bucket to transition objects from S3 Standard-IA to S3 Standard after 15 days, expecting replication to process the restored objects.

Answer

To successfully enable replication, S3 Versioning must be enabled on both the source and destination buckets, and the IAM replication role must be assumable by the Amazon S3 service principal with appropriate permissions to read from the source and write to the destination.
To configure S3 replication, versioning must be enabled on both the source and destination buckets. Additionally, the IAM replication role must have a trust relationship that allows the Amazon S3 service principal to assume the role, and the role must be granted permissions to retrieve object versions from the source bucket and replicate objects to the destination bucket.

Step-by-Step Solution

1
Enable versioning on the source and destination buckets.
Both buckets support versioned objects, which is required for S3 to track and replicate individual object states.
S3 replication requires versioning to be enabled on both the source and destination buckets.
2
Configure the trust relationship of the IAM replication role to trust s3.amazonaws.com and allow sts:AssumeRole.
The Amazon S3 service principal is authorized to assume the role.
Amazon S3 needs to assume the replication role to perform replication actions on your behalf.
3
Attach a policy to the IAM replication role allowing s3:GetObjectVersion and s3:GetObjectVersionAcl on the source bucket, and s3:ReplicateObject on the destination bucket.
The role has the necessary permissions to read replication source metadata and write replication target objects.
Replication fails if the replication role lacks permissions to read source objects or write to the destination bucket.

Key Concept

Amazon S3 replication requires versioning to be enabled on both source and destination buckets, and an IAM role trusted by the Amazon S3 service principal with appropriate bucket and object access permissions.
Estimated Time:1m 30s
Rate this question

Topics

S3 Reliability and Replication

More questions from this topic