An enterprise runs a critical content management system in a single VPC in the us-east-1 Region. The application tier consists of Amazon EC2 instances in an Auto Scaling group behind an Application Load Balancer. The database tier uses an Amazon Aurora PostgreSQL DB cluster.
To meet a new compliance requirement, the enterprise needs to establish a multi-region disaster recovery (DR) solution in the us-west-2 Region. The solution must achieve a Recovery Point Objective (RPO) of 1 minute and a Recovery Time Objective (RTO) of 15 minutes.
Which TWO steps should the solutions architect take to meet these DR objectives?
- Configure an Amazon Aurora Global Database with the primary cluster in us-east-1 and a secondary cluster in us-west-2.Cevap
- Deploy a duplicate application stack in us-west-2 and configure Route 53 Application Recovery Controller (ARC) routing controls to manage regional traffic failover.Cevap
- CImplement AWS Backup to copy daily database snapshots to the us-west-2 Region and automate the restore process using AWS Lambda during a failover event.
- DCreate a Route 53 Private Hosted Zone for database endpoint resolution in the us-east-1 VPC, relying on default cross-region VPC peering to resolve DNS queries from the us-west-2 VPC.
- EProvision a single NAT Gateway in us-west-2 to route outbound traffic for the standby EC2 instances across multiple Availability Zones to optimize DR standby costs.
Cevap
To meet the disaster recovery objectives, the solutions architect must configure Amazon Aurora Global Database for cross-region database replication and utilize Route 53 Application Recovery Controller (ARC) routing controls for regional DNS failover.
To meet an RPO of 1 minute and an RTO of 15 minutes, the database replication must be continuous and near real-time. Amazon Aurora Global Database uses storage-based replication to replicate data to the secondary region (us-west-2) in less than a second, satisfying the RPO. For traffic routing, Route 53 Application Recovery Controller (ARC) routing controls provide deterministic failover capabilities that can change DNS routing within seconds, helping the overall stack achieve the 15-minute RTO.
Adım Adım Çözüm
Anahtar Kavram
Multi-region disaster recovery replication and deterministic DNS failover routing orchestration.