Soru

Zorluk: ZorHigh Availability and Disaster Recovery Design

A multinational legal services firm is designing a new document e-discovery platform on AWS. The application tier will run on Amazon EC2 instances in private subnets across three Availability Zones in both the primary Region (eu-west-1) and the disaster recovery Region (us-east-1). The EC2 instances must query external court deposition APIs over the public internet to validate filing metadata. The database layer will run on Amazon Aurora PostgreSQL.

The system must meet the following business requirements:
- Recovery Time Objective (RTO) must be less than 10 minutes.
- Recovery Point Objective (RPO) must be less than 1 minute.
- Internal microservices in both Regions must resolve internal database endpoints using a single private hosted zone named corp.discovery.local.
- External user traffic should target the primary Region by default, but fail over automatically to the disaster recovery Region if the primary Region's application tier experiences degraded health.
- Outbound network traffic in each Region must be highly available and resilient to Availability Zone failures.

Which architecture should a solutions architect select to meet these requirements with the lowest operational complexity?

  1. Deploy an Amazon Aurora Global Database with the primary cluster in eu-west-1 and a secondary cluster in us-east-1. Deploy a NAT Gateway in each Availability Zone in both Regions to handle outbound traffic. Associate the Route 53 Private Hosted Zone corp.discovery.local with the VPCs in both Regions. Configure Route 53 Failover routing for external traffic, pointing the primary record to the eu-west-1 Application Load Balancer (ALB) with an active health check, and the secondary record to the us-east-1 ALB.Cevap
  2. B
    Deploy an Amazon Aurora PostgreSQL DB instance in eu-west-1 and configure cross-Region snapshot copies to us-east-1 every 12 hours. Deploy a NAT Gateway in each Availability Zone in both Regions to handle outbound traffic. Associate the Route 53 Private Hosted Zone corp.discovery.local with the VPCs in both Regions. Configure Route 53 Failover routing for external traffic, pointing the primary record to the eu-west-1 Application Load Balancer (ALB) with an active health check, and the secondary record to the us-east-1 ALB.
  3. C
    Deploy an Amazon Aurora Global Database with the primary cluster in eu-west-1 and a secondary cluster in us-east-1. Deploy a NAT Gateway in each Availability Zone in both Regions to handle outbound traffic. Create the Route 53 Private Hosted Zone corp.discovery.local and associate it only with the VPC in eu-west-1. Configure Route 53 Failover routing for external traffic, pointing the primary record to the eu-west-1 Application Load Balancer (ALB) with an active health check, and the secondary record to the us-east-1 ALB.
  4. D
    Deploy an Amazon Aurora Global Database with the primary cluster in eu-west-1 and a secondary cluster in us-east-1. Deploy a single NAT Gateway in the primary Availability Zone of each Region's VPC to route outbound traffic. Associate the Route 53 Private Hosted Zone corp.discovery.local with the VPCs in both Regions. Configure Route 53 Failover routing for external traffic, pointing the primary record to the eu-west-1 Application Load Balancer (ALB) with an active health check, and the secondary record to the us-east-1 ALB.

Cevap

The architecture that deploys an Amazon Aurora Global Database across both Regions, provisions a NAT Gateway in each Availability Zone of both VPCs, associates the Route 53 Private Hosted Zone corp.discovery.local with both VPCs, and configures Route 53 Failover routing with health checks on the primary Application Load Balancer.
The correct architecture uses Amazon Aurora Global Database to achieve the required sub-second replication lag, fitting within the 1-minute RPO. It deploys multiple NAT Gateways (one per Availability Zone) in both Regions to ensure that outbound traffic is highly available and immune to AZ-level failures. It associates the Route 53 Private Hosted Zone with the VPCs in both Regions, ensuring that internal microservices can resolve the database endpoint locally in both the primary and standby environments. Finally, it uses Route 53 Failover routing with active health checks to ensure that user traffic is automatically redirected to the disaster recovery Region in the event of an outage in the primary Region.

Adım Adım Çözüm

1
Evaluate the database replication strategy against RTO and RPO constraints.
Amazon Aurora Global Database provides sub-second cross-Region replication, which meets the 1-minute RPO, and allows quick promotion of the secondary cluster to primary within minutes, meeting the 10-minute RTO.
Traditional backup and restore methods like snapshot replication have recovery times and data loss risks that exceed the strict RPO/RTO envelope.
2
Ensure outbound network high availability in private subnets.
Provision one NAT Gateway per Availability Zone within each Region's VPC.
Deploying a single NAT Gateway introduces a single point of failure; if the hosting Availability Zone suffers an outage, the other zones lose outbound connectivity.
3
Set up private name resolution across Regions.
Associate the Route 53 Private Hosted Zone (PHZ) with the VPCs in both eu-west-1 and us-east-1.
Route 53 Private Hosted Zones do not automatically resolve queries from other VPCs unless they are explicitly associated with those VPCs.
4
Configure external user routing and automatic failover.
Implement Route 53 Failover routing pointing the primary record to eu-west-1 and the secondary record to us-east-1, with an active health check configured on the primary ALB.
This configuration ensures that user requests are sent to the primary Region by default, but fail over to the standby Region if the primary Region becomes unhealthy.

Anahtar Kavram

Designing multi-Region disaster recovery architectures utilizing Amazon Aurora Global Database, multi-AZ NAT Gateways, and Route 53 Private Hosted Zone VPC association.
Tahmini Süre:3m 0s
Bu soruyu puanla