A healthcare enterprise is planning to migrate a dataset from an on-premises S3-compatible object storage system to an Amazon S3 bucket. The enterprise has a internet connection and a dedicated AWS Direct Connect connection. To minimize impact on other corporate workloads, only of the Direct Connect bandwidth can be allocated for this migration. The migration must be completed within 30 days. The source dataset is actively modified, with approximately of new files added weekly. Security policies require all data to be encrypted at rest in the target bucket using an AWS KMS Customer Managed Key (CMK). Which migration strategy meets these requirements within the specified timeframe and with the lowest operational overhead?
- ADeploy multiple AWS DataSync agents on-premises. Configure a DataSync task with the on-premises S3-compatible storage as the source and the target S3 bucket as the destination, using the KMS Customer Managed Key for destination encryption. Execute the task over the Direct Connect connection using the allocated bandwidth limit.
- BOrder multiple AWS Snowball Edge Storage Optimized devices. Copy the initial data from the on-premises storage to the devices using the S3-compatible endpoint, encrypting it with the AWS-managed KMS key (`aws/s3`). Ship the devices to AWS. Once ingested, deploy an AWS DataSync agent on-premises, create a task from the S3-compatible source to the target S3 bucket, and execute it over the Direct Connect link to sync the remaining delta changes.
- Order multiple AWS Snowball Edge Storage Optimized devices. Copy the initial data from the on-premises storage to the devices using the S3-compatible endpoint, encrypting it with the KMS Customer Managed Key. Ship the devices to AWS. Once ingested, deploy an AWS DataSync agent on-premises, create a task from the S3-compatible source to the target S3 bucket, and execute it over the Direct Connect link to sync the remaining delta changes.Cevap
- DOrder multiple AWS Snowball Edge Storage Optimized devices. Copy all data to the devices using the S3-compatible endpoint, encrypting it with the KMS Customer Managed Key, and ship them to AWS. Perform weekly shipments of additional devices containing the updates to AWS for ingestion until the migration project is completed.
Cevap
Order multiple AWS Snowball Edge Storage Optimized devices to copy the initial data using a Customer Managed Key, ship them to AWS, and then use an AWS DataSync task to synchronize the remaining delta changes over the Direct Connect link.
The correct strategy uses multiple AWS Snowball Edge Storage Optimized devices to transport the bulk data (), which solves the network bandwidth limitation. Once the bulk data is ingested, AWS DataSync is used to replicate the remaining delta changes ( per week) over the connection. Using a Customer Managed Key meets both the encryption policy and Snowball compatibility requirements.
Adım Adım Çözüm
Anahtar Kavram
Combining offline physical migration (Snowball Edge) with online delta replication (DataSync) for large-scale datasets with limited bandwidth and strict migration windows.