Examkin

Soru

Zorluk: OrtaDatabase and Storage Strategy

A retail company is designing a new global e-commerce order processing platform. The database must support an OLTP workload with strong transactional consistency, scale read operations automatically during flash sales, and support a disaster recovery strategy with a recovery point objective (RPO) of less than 1 minute and a recovery time objective (RTO) of less than 15 minutes. Additionally, corporate security policy mandates that all data be encrypted at rest using a Customer Managed Key (CMK) owned by a centralized security AWS account. Which database and storage strategy meets these requirements with the lowest operational overhead?

  1. Deploy an Amazon Aurora PostgreSQL Global Database. Encrypt the primary cluster using a Customer Managed Key (CMK) from the centralized security account, and configure cross-region replication to a secondary region using a replica CMK. Enable Aurora Auto Scaling for read replicas in both regions to handle peak read loads, and promote the secondary cluster if the primary region experiences an outage.Cevap
  2. B
    Deploy an Amazon Aurora PostgreSQL Global Database. Encrypt the primary cluster using the default AWS-managed KMS key (aws/rds). Share the primary cluster with the secondary region by updating the default key policy to allow cross-account access for the database service roles, and configure Aurora Auto Scaling for read replicas.
  3. C
    Deploy an Amazon RDS PostgreSQL database in a Multi-AZ configuration with cross-region read replicas. Encrypt the primary instance using a Customer Managed Key (CMK) from the centralized security account. Configure the primary DB instance's passive standby replica in the secondary Availability Zone to automatically scale and accept read traffic to handle sudden spikes.
  4. D
    Deploy a single-region Amazon Aurora PostgreSQL cluster encrypted with a Customer Managed Key (CMK) from the centralized security account. Implement a pilot light disaster recovery solution by copying automated database snapshots hourly to the secondary region, and maintain a pre-provisioned, scaled-down database instance in the secondary region to restore snapshots during failover.

Cevap

Deploy an Amazon Aurora PostgreSQL Global Database, encrypting the primary cluster with a Customer Managed Key (CMK) from the centralized security account, using a replica CMK in the secondary region, configuring Aurora Auto Scaling for read replicas, and promoting the secondary cluster during a failover.
The correct strategy leverages Amazon Aurora Global Database to achieve low-latency cross-region replication (RPO < 1 second) and fast region promotion (RTO < 1 minute). By utilizing Customer Managed Keys (CMKs) rather than AWS-managed keys, the key policies can be updated to delegate cross-account use by the database cluster service roles. Aurora Auto Scaling dynamically manages read replica capacity across multiple Availability Zones to handle read spikes during peak hours.

Adım Adım Çözüm

1
Analyze database performance, transactional consistency, and scalability requirements.
The platform requires an OLTP database supporting strong consistency and automated read scaling. Amazon Aurora PostgreSQL supports these capabilities natively.
Aurora offers up to 15 read replicas with Auto Scaling and provides ACID-compliant OLTP execution.
2
Evaluate disaster recovery requirements (RPO < 1 minute, RTO < 15 minutes).
Amazon Aurora Global Database provides sub-second replication latency (RPO < 1 second) and can be promoted to a primary region in under a minute (RTO < 1 minute).
This exceeds the business requirements while keeping operational overhead minimal compared to snapshot restoration.
3
Assess security and KMS encryption mandates for a multi-account structure.
A Customer Managed Key (CMK) must be used because it supports key policy delegation, allowing cross-account sharing and replication of encrypted snapshots or storage volumes. A replica CMK is deployed in the secondary region.
AWS-managed keys (aws/rds) cannot be modified or shared across different AWS accounts, rendering them unusable for this design.

Anahtar Kavram

Amazon Aurora Global Database architecture combined with cross-account AWS KMS Customer Managed Keys (CMKs) to satisfy high-availability, scalability, and strict security compliance mandates.
Tahmini Süre:2m 0s
Bu soruyu puanla

Konular

Database and Storage Strategy

Bu konudan daha fazla soru