A SysOps Administrator is setting up Cross-Region Replication (CRR) for an Amazon S3 bucket to meet strict business continuity requirements. The compliance team mandates that 99.99% of all new objects must be replicated to the destination bucket in another AWS Region within 15 minutes, and the replication latency must be actively monitored. Which configuration will successfully meet these requirements?
- AConfigure a replication rule with Amazon S3 Replication Time Control (S3 RTC) enabled, but leave Amazon S3 Versioning disabled on the destination bucket to optimize performance.
- BCreate a replication rule using an IAM role that has the iam:PassRole permission defined in its trust policy, allowing the Amazon S3 service to execute replication tasks.
- Enable Amazon S3 Replication Time Control (S3 RTC) on the replication rule, ensuring that versioning is enabled on both the source and destination buckets.Answer
- DReplicate KMS-encrypted objects by adding decrypt and encrypt permissions for the destination KMS key to the replication IAM role policy, while leaving the destination KMS key policy with default restrictions.
Answer
Enable Amazon S3 Replication Time Control (S3 RTC) on the replication rule, ensuring that versioning is enabled on both the source and destination buckets.
The correct answer configuration enables Amazon S3 Replication Time Control (S3 RTC) while keeping S3 Versioning enabled on both buckets. S3 RTC is designed specifically for compliance requirements needing guaranteed replication within 15 minutes, and it publishes replication latency metrics to CloudWatch. S3 Versioning must be active on both buckets to track version IDs during the replication process.
Step-by-Step Solution
Key Concept
S3 Replication Time Control (RTC) requires S3 Versioning on both source and destination buckets and provides SLA-backed 15-minute replication.