A company is designing a new multi-region disaster recovery (DR) architecture for a critical legal compliance workflow application. The application runs on Amazon EC2 instances in private subnets behind an Application Load Balancer (ALB) in Region A. The instances must access external regulatory APIs on the internet. An internal Route 53 Private Hosted Zone (PHZ) is used for microservice communication. The backend database is Amazon Aurora PostgreSQL. The DR design must support a secondary region (Region B) with a recovery point objective (RPO) of 5 minutes, a recovery time objective (RTO) of 15 minutes, and minimize ongoing costs while ensuring no single points of failure within either region. Which architecture meets these requirements?
- ADeploy Amazon Aurora PostgreSQL Global Database with the primary cluster in Region A and a secondary cluster in Region B. Create a Route 53 Private Hosted Zone associated with both VPCs. To minimize running costs, deploy a single NAT Gateway in one Availability Zone in the Region A VPC and another single NAT Gateway in the Region B VPC. Configure Route 53 Active-Passive Failover routing policy with health checks.
- Deploy Amazon Aurora PostgreSQL Global Database with the primary cluster in Region A and a secondary cluster in Region B. Create a Route 53 Private Hosted Zone for internal service discovery and associate it with both the Region A and Region B VPCs. Deploy one NAT Gateway per Availability Zone in the public subnets of both VPCs. Configure Route 53 Active-Passive Failover routing policy with health checks to route public traffic to Region A, falling back to Region B.Cevap
- CDeploy Amazon Aurora PostgreSQL Global Database with the primary cluster in Region A and a secondary cluster in Region B. Create a Route 53 Private Hosted Zone for internal service discovery and associate it only with the VPC in Region A. Deploy one NAT Gateway per Availability Zone in both VPCs. Configure Route 53 Active-Passive Failover routing policy with health checks.
- DImplement an AWS Backup plan that creates hourly snapshots of the Aurora PostgreSQL database in Region A and replicates them to Region B. Create a Route 53 Private Hosted Zone associated with both VPCs. Deploy one NAT Gateway per Availability Zone in both VPCs. Configure Route 53 Active-Passive Failover routing policy to route traffic to Region B, where a script will restore the database from the latest snapshot and launch the application servers upon failover.
Cevap
Deploying Amazon Aurora PostgreSQL Global Database, associating the internal Route 53 Private Hosted Zone with both VPCs, deploying NAT Gateways in each Availability Zone in both VPCs, and configuring Route 53 Active-Passive Failover routing policy.
The correct architecture uses Amazon Aurora PostgreSQL Global Database to replicate data asynchronously to the secondary region, which easily meets the 5-minute RPO. High availability for outbound traffic is maintained in both VPCs by deploying a NAT Gateway in each Availability Zone. Furthermore, associating the Route 53 Private Hosted Zone with the VPCs in both regions guarantees that internal microservices can resolve internal DNS names after a failover. Finally, configuring Route 53 Active-Passive Failover routing policy dynamically reroutes client requests to Region B if the primary region fails.
Adım Adım Çözüm
Anahtar Kavram
Multi-region disaster recovery design incorporating Route 53 active-passive failover, Private Hosted Zone VPC association, Aurora replication, and NAT Gateway redundancy.
Tahmini Süre:3m 0s