An organization wants to automatically copy all newly uploaded objects from a production Amazon S3 bucket to a backup S3 bucket in a different AWS Region for disaster recovery. A SysOps administrator creates a replication rule, but replication fails to start. What must the administrator configure on the S3 buckets to resolve this issue?
- AAttach an IAM user policy to the SysOps administrator that allows the sts:AssumeRole action.
- BEnable S3 Versioning only on the source bucket and keep versioning disabled on the destination bucket.
- Enable S3 Versioning on both the source bucket and the destination bucket.Answer
- DAdd a bucket policy to the destination bucket that explicitly grants kms:Decrypt permission to the source bucket.
Answer
Enable S3 Versioning on both the source bucket and the destination bucket.
The correct option is to enable S3 Versioning on both the source bucket and the destination bucket. S3 replication relies on versioning to track objects and replicate deletes and updates correctly. Without versioning enabled on both buckets, replication cannot function.
Step-by-Step Solution
Key Concept
Amazon S3 replication requires both the source and destination buckets to have versioning enabled.