Soru

Zorluk: OrtaLarge-Scale Data Transfer using Snow Family, DataSync, and Transfer Family

An enterprise needs to migrate 350 TB350\text{ TB} of data from an on-premises SMB file share to an Amazon FSx for Windows File Server file system. The company has a dedicated 150 Mbps150\text{ Mbps} internet connection. The migration must be completed within 2121 days. In addition, all transferred data must be encrypted at rest using an AWS KMS customer managed key (CMK). Any incremental updates made on-premises during the migration must be captured and synced to AWS. Which two actions should the Solutions Architect take to meet these requirements? (Select TWO.)

  1. Order AWS Snowball Edge Storage Optimized devices. Set the destination to an Amazon S3 bucket, and specify an AWS KMS customer managed key to encrypt the data on the devices.Cevap
  2. Deploy AWS DataSync agents on-premises, and configure tasks to copy the imported bulk data from the Amazon S3 bucket to Amazon FSx, and subsequently sync the incremental changes from the on-premises SMB share to Amazon FSx.Cevap
  3. C
    Deploy AWS DataSync agents on-premises, and configure a task to replicate the entire 350 TB350\text{ TB} dataset directly from the SMB file share to Amazon FSx for Windows File Server over the network.
  4. D
    Order AWS Snowball Edge Storage Optimized devices. Set the destination to an Amazon S3 bucket, and specify the default AWS managed key (`aws/s3`) to encrypt the data on the devices.
  5. E
    Configure an AWS Direct Connect gateway to route transitive traffic directly between the staging VPC containing the Amazon S3 bucket and the destination VPC containing the Amazon FSx file system.

Cevap

Order AWS Snowball Edge Storage Optimized devices using a customer managed key for encryption, and deploy AWS DataSync agents to manage the data replication to Amazon FSx and incremental synchronization from the on-premises SMB share.
The correct strategy combines offline data migration using AWS Snowball Edge to overcome network bandwidth limitations with online replication using AWS DataSync. Ordering AWS Snowball Edge Storage Optimized devices with a customer managed key satisfies the encryption requirement and timeline for the bulk of the data. Deploying AWS DataSync allows the organization to move the imported bulk data from S3 to Amazon FSx for Windows File Server and sync any subsequent changes from the on-premises SMB share over the network.

Adım Adım Çözüm

1
Calculate the transfer time for the initial load over the network.
The theoretical transfer time for 350 TB350\text{ TB} over 150 Mbps150\text{ Mbps} is approximately 216216 days (350×1012×8/150×10618,666,667350 \times 10^{12} \times 8 / 150 \times 10^6 \approx 18,666,667 seconds), which violates the 2121-day migration window.
Determines whether an online transfer is feasible or if an offline transfer mechanism (Snowball Edge) is required.
2
Determine the Snowball encryption requirements.
Specify an AWS KMS customer managed key (CMK) for the Snowball job.
AWS managed keys (such as `aws/s3`) cannot be used for Snowball Edge encryption because their policies cannot be modified to authorize the Snowball service.
3
Plan the ingestion from the Snowball destination to the target file system and the incremental sync.
Use AWS DataSync to copy the imported bulk data from the Amazon S3 bucket to Amazon FSx, and then sync any incremental changes from the on-premises SMB share directly to Amazon FSx.
AWS DataSync supports copying data between AWS storage services and syncing changes from on-premises sources over the network, which completes the migration and captures any modifications made during transit.

Anahtar Kavram

Selecting the optimal data transfer strategy based on dataset size, available network bandwidth, time constraints, and KMS security policies.
Bu soruyu puanla