A multinational digital payment platform is designing a new multi-region disaster recovery architecture for its core ledger application. The application will run in us-east-1 (primary) and us-west-2 (secondary). The business requires a Recovery Time Objective (RTO) of less than 2 minutes and a Recovery Point Objective (RPO) of less than 5 seconds. To support compliance audits, the application servers in the private subnets of both VPCs must routinely download third-party security lists from the internet. The solutions architect needs to design a highly available and resilient networking and database replication architecture that minimizes latency and ensures automated failover. Which TWO actions should the solutions architect take to meet these requirements?
- Deploy an Amazon Aurora Global Database with the primary cluster in us-east-1 and a secondary cluster in us-west-2, and configure the application to write to the primary region.Cevap
- Create an Amazon Route 53 failover routing policy with an active record pointing to the us-east-1 Application Load Balancer and a passive record pointing to the us-west-2 Application Load Balancer, both associated with Route 53 active application health checks.Cevap
- CDeploy a single NAT Gateway in the primary Availability Zone of each VPC to consolidate outbound egress traffic for all private subnets across all Availability Zones in that region.
- DDeploy an Amazon RDS PostgreSQL DB instance with synchronous Multi-AZ replication enabled across both us-east-1 and us-west-2 regions to achieve zero data loss.
- EConfigure Amazon Aurora Auto Scaling in the secondary region to scale out reader endpoints, allowing them to automatically start accepting write traffic prior to promoting the secondary cluster.