A healthcare enterprise needs to migrate of historical medical imaging archives from an on-premises data center to Google Cloud Storage within a strict deadline of . The organization has an existing Dedicated Interconnect link, but baseline daily operations consistently consume of its total bandwidth capacity. Corporate security governance mandates that all migrated data must be encrypted using Customer-Managed Encryption Keys (CMEK). Which data transfer strategy should you recommend to meet both the operational constraints and completion timeline?
- Order GCP Transfer Appliance devices to perform an offline bulk data copy on-premises, ship the devices to Google for ingestion into Cloud Storage, and apply CMEK encryption during bucket setup.Answer
- BConfigure Storage Transfer Service to perform an online data migration over the existing Dedicated Interconnect connection using parallel agent pools.
- CProvision multiple high-throughput HA VPN tunnels over the public internet to bypass the bandwidth constraints of the existing Dedicated Interconnect link.
- DStage the dataset in public Cloud Storage buckets via gsutil over the internet, relying exclusively on IAM roles for data protection without configuring VPC Service Controls.
Answer
Order GCP Transfer Appliance devices to transfer the petabyte-scale data offline to Cloud Storage, and secure the ingested data using Customer-Managed Encryption Keys (CMEK).
For petabyte-scale datasets () where usable network bandwidth is restricted to , online network transfer would take over 23 months. Utilizing Transfer Appliance allows secure offline capture and rapid physical delivery, satisfying both the 30-day migration timeframe and CMEK security compliance requirements.
Step-by-Step Solution
Key Concept
Selecting between online network transfer (Storage Transfer Service) and offline physical transfer (Transfer Appliance) based on dataset size, available bandwidth, and completion timelines.