Soru

Zorluk: ZorEnhancing Reliability and Disaster Recovery

An enterprise operates a payment processing application in the us-east-1 Region. The application runs on Amazon ECS tasks (AWS Fargate) behind an Application Load Balancer (ALB). The database tier consists of an Amazon Aurora PostgreSQL cluster. Outbound transactions to external payment gateways are routed through a single NAT Gateway in us-east-1. The company needs to design a disaster recovery (DR) solution in the us-west-2 Region. The solution must achieve a Recovery Time Objective (RTO) of less than 15 minutes and a Recovery Point Objective (RPO) of less than 1 minute, while also eliminating single points of failure for outbound external traffic. Which combination of actions should the Solutions Architect take to enhance reliability and meet the disaster recovery objectives? (Select TWO.)

  1. Configure Amazon Aurora Global Database with the primary cluster in us-east-1 and a secondary cluster in us-west-2. Use AWS Route 53 Application Recovery Controller (ARC) routing controls to manage the failover of the database and application traffic.Cevap
  2. B
    Configure AWS Backup to take hourly cross-region snapshots of the Aurora PostgreSQL database to us-west-2, and use AWS CloudFormation to provision the ECS resources in the secondary region during a failover event.
  3. Deploy NAT Gateways in all occupied Availability Zones within both the us-east-1 and us-west-2 VPCs, and update private subnet route tables to use the zone-specific NAT Gateway for outbound traffic.Cevap
  4. D
    Create a Route 53 Private Hosted Zone (PHZ) in the primary account for internal microservice DNS resolution, and rely on cross-region VPC peering to automatically resolve these private domains from the secondary region without associating the PHZ with the us-west-2 VPC.
  5. E
    Deploy a duplicate application stack in us-west-2 and configure Route 53 active-passive failover routing records pointing directly to the ALBs without associating health checks, relying on manual DNS record modifications during an outage.

Cevap

Configure Amazon Aurora Global Database with a secondary cluster in us-west-2 and use AWS Route 53 ARC to manage failover, while deploying multi-AZ NAT Gateways in both regions to eliminate outbound single points of failure.
The correct architecture integrates Amazon Aurora Global Database to achieve low-latency replication that satisfies the sub-minute RPO, paired with AWS Route 53 Application Recovery Controller (ARC) to automate failover and satisfy the sub-15-minute RTO. Additionally, deploying multiple NAT Gateways ensures outbound connectivity remains highly reliable by removing single-AZ network egress dependency.

Adım Adım Çözüm

1
Address the Database RPO and RTO requirements.
Migrate the database to Amazon Aurora Global Database to enable cross-region replication with a typical latency of less than 1 second, meeting the RPO of less than 1 minute.
Standard cross-region snapshots or backups cannot guarantee data loss limits of under 1 minute.
2
Establish the multi-region DNS routing and failover orchestration.
Utilize AWS Route 53 Application Recovery Controller (ARC) routing controls to monitor and orchestrate regional failover within minutes.
Route 53 ARC provides the coordination mechanism required to keep failover operations within the 15-minute RTO without manual DNS edits.
3
Eliminate single points of failure for outbound payment gateway traffic.
Deploy NAT Gateways in all occupied Availability Zones in both the source and destination VPCs, updating routing tables accordingly.
A single NAT Gateway per VPC is a single point of failure; multi-AZ NAT Gateway deployments ensure high availability for outbound traffic.

Anahtar Kavram

Multi-region disaster recovery coordination and elimination of single points of network egress failures.
Tahmini Süre:2m 30s
Bu soruyu puanla