Soru

Zorluk: OrtaHigh Availability and Disaster Recovery Design

A multinational digital payment platform is designing a new multi-region disaster recovery architecture for its core ledger application. The application will run in us-east-1 (primary) and us-west-2 (secondary). The business requires a Recovery Time Objective (RTO) of less than 2 minutes and a Recovery Point Objective (RPO) of less than 5 seconds. To support compliance audits, the application servers in the private subnets of both VPCs must routinely download third-party security lists from the internet. The solutions architect needs to design a highly available and resilient networking and database replication architecture that minimizes latency and ensures automated failover. Which TWO actions should the solutions architect take to meet these requirements?

  1. Deploy an Amazon Aurora Global Database with the primary cluster in us-east-1 and a secondary cluster in us-west-2, and configure the application to write to the primary region.Cevap
  2. Create an Amazon Route 53 failover routing policy with an active record pointing to the us-east-1 Application Load Balancer and a passive record pointing to the us-west-2 Application Load Balancer, both associated with Route 53 active application health checks.Cevap
  3. C
    Deploy a single NAT Gateway in the primary Availability Zone of each VPC to consolidate outbound egress traffic for all private subnets across all Availability Zones in that region.
  4. D
    Deploy an Amazon RDS PostgreSQL DB instance with synchronous Multi-AZ replication enabled across both us-east-1 and us-west-2 regions to achieve zero data loss.
  5. E
    Configure Amazon Aurora Auto Scaling in the secondary region to scale out reader endpoints, allowing them to automatically start accepting write traffic prior to promoting the secondary cluster.

Cevap

Deploy an Amazon Aurora Global Database with the primary cluster in us-east-1 and a secondary cluster in us-west-2, and configure the application to write to the primary region; and create an Amazon Route 53 failover routing policy with an active record pointing to the us-east-1 Application Load Balancer and a passive record pointing to the us-west-2 Application Load Balancer, both associated with Route 53 active application health checks.
The correct combination involves deploying Amazon Aurora Global Database to achieve the required sub-second cross-region replication (RPO < 5s) and quick failover (RTO < 2m), paired with an Amazon Route 53 active-passive failover routing policy that redirects application traffic to the secondary region's Application Load Balancer upon primary health check failure.

Adım Adım Çözüm

1
Select a database replication strategy that meets the target RTO of less than 2 minutes and RPO of less than 5 seconds.
Identify Amazon Aurora Global Database as the correct solution because it achieves sub-second cross-region replication (meeting the RPO) and supports failover/promotion in under a minute (meeting the RTO).
Standard RDS Multi-AZ is regional, and cross-region RDS replication is asynchronous with higher promotion overhead. Aurora Global DB fits the strict HA/DR objectives.
2
Choose a DNS routing policy to automate traffic failover between regions.
Select Route 53 Active-Passive Failover routing policy combined with health checks linked to the Application Load Balancers.
This guarantees that user requests are dynamically routed to the secondary region if the primary region's endpoint becomes unhealthy, minimizing RTO.
3
Ensure egress networking is highly available across Availability Zones.
Avoid placing a single NAT Gateway in one Availability Zone, as it represents a single point of failure.
Highly available multi-AZ egress architectures require a NAT Gateway in each Availability Zone.

Anahtar Kavram

Designing a resilient multi-region architecture using Route 53 failover routing, Amazon Aurora Global Database replication, and redundant multi-AZ networking.
Bu soruyu puanla