Question

Difficulty: MediumS3 Reliability and Replication

A SysOps Administrator is configuring Cross-Region Replication (CRR) between two Amazon S3 buckets. The source bucket is in the us-east-1 Region and has S3 Versioning enabled. The destination bucket is in the us-west-2 Region. The administrator creates a replication IAM role and attempts to apply the replication configuration to the source bucket using the AWS CLI. The command fails with a validation error indicating that replication cannot be configured. Which of the following is the most likely cause of this error?

  1. S3 Versioning is not enabled on the destination S3 bucket.Answer
  2. B
    The trust policy of the replication IAM role is missing the iam:PassRole permission for the Amazon S3 service.
  3. C
    S3 replication only requires versioning on the source bucket, but the source bucket's versioning must be suspended while the replication rule is applied.
  4. D
    The administrator's IAM policy is missing the sts:AssumeRole permission for the replication IAM role.

Answer

S3 Versioning is not enabled on the destination S3 bucket.
Amazon S3 replication requires S3 Versioning to be enabled on both the source and destination buckets. If S3 Versioning is not enabled or is suspended on the destination bucket, S3 will fail to apply the replication configuration and throw a validation error.

Step-by-Step Solution

1
Inspect the replication CLI error logs to identify the validation failure point.
The CLI logs show a validation error indicating that replication targets must have versioning enabled.
This helps locate the specific requirement that was missed during bucket preparation.
2
Enable S3 Versioning on the destination S3 bucket in the us-west-2 Region.
The destination bucket now has active versioning.
Amazon S3 replication requires version IDs to track and sync objects; thus, both buckets must have versioning enabled.
3
Re-run the AWS CLI replication configuration command.
The replication configuration is successfully applied to the source bucket.
Enabling versioning on both buckets satisfies the S3 replication pre-requisite.

Key Concept

S3 Replication Versioning Requirements
Estimated Time:1m 30s
Rate this question