Soru

Zorluk: OrtaHigh Availability and Disaster Recovery Design

A real estate platform is designing a new multi-region disaster recovery (DR) and high availability architecture for its listing portal. The primary region is us-east-1 and the secondary region is us-west-2. The solution must support an RTO of 15 minutes and an RPO of 5 minutes, while minimizing baseline costs. The outbound internet connectivity from private subnets must remain operational if a single Availability Zone experiences an outage. Under normal operations, users must be routed to the region that offers the lowest latency, and failover to the backup region must occur automatically if the primary region becomes unhealthy.

Which two architectural components should a Solutions Architect select to meet these requirements? (Select two.)

  1. Configure Amazon Aurora Global Database with the primary cluster in us-east-1 and a secondary cluster in us-west-2, and deploy one NAT Gateway per Availability Zone in each region's public subnets.Cevap
  2. Configure Route 53 Latency routing records with associated health checks pointing to the Application Load Balancers in both regions.Cevap
  3. C
    Configure the database using hourly Amazon RDS snapshots copied to us-west-2, and restore the database cluster in the secondary region during a failover event.
  4. D
    Deploy a single NAT Gateway in one public subnet per region to handle all outbound traffic across all private subnets to minimize baseline costs.
  5. E
    Create Route 53 Private Hosted Zones in the secondary region and associate them with all consumer VPCs in both regions to perform regional failover for external users.
  6. F
    Configure Amazon RDS Multi-AZ replication across both regions, and use the standby instance in the secondary region to serve low-latency read traffic.

Cevap

To meet the RTO, RPO, and high availability requirements, the architecture must utilize Amazon Aurora Global Database for low-latency cross-region replication, deploy a NAT Gateway in each Availability Zone in both regions for outbound redundancy, and implement Route 53 Latency routing with health checks to route users to the closest healthy region.
The combination of Amazon Aurora Global Database for database replication and Route 53 Latency routing with health checks meets the requirements. Aurora Global Database replicates data continuously across regions with lag typically under one second, ensuring that the 5-minute RPO is met. If the primary region fails, the secondary cluster can be promoted to a standalone read-write database in under a minute, comfortably meeting the 15-minute RTO. Route 53 Latency routing directs clients to the region offering the best performance, and the associated health checks ensure automated routing away from a degraded region. Deploying a NAT Gateway in each Availability Zone ensures that outbound network connectivity is protected against single Availability Zone failures.

Adım Adım Çözüm

1
Evaluate cross-region database replication options to meet the RTO of 15 minutes and RPO of 5 minutes.
Determine that Amazon Aurora Global Database provides sub-second replication latency (meeting the 5-minute RPO) and fast promotion (meeting the 15-minute RTO), while traditional snapshot copies fail the target metrics.
Aligning data replication speed with RPO/RTO constraints is a primary driver in selecting the DR architecture pattern.
2
Design NAT Gateway placement in public subnets to prevent outbound traffic failure during an Availability Zone outage.
Deploy one NAT Gateway per Availability Zone rather than a single shared NAT Gateway per region.
A single NAT Gateway per region introduces a single point of failure, violating the high availability constraint for outbound traffic.
3
Select and configure Route 53 public routing policies for low-latency user routing and automatic regional failover.
Configure Latency-based routing records for the public domain name and associate health checks targeting the Application Load Balancer in each region.
Latency routing directs users to the closest region, and the associated health checks allow Route 53 to stop routing to a degraded region automatically.

Anahtar Kavram

Selecting proper disaster recovery patterns (Active-Passive or Active-Active) and routing mechanisms based on RTO, RPO, outbound HA, and latency constraints.
Bu soruyu puanla