A financial organization is designing a new global relational Online Transaction Processing (OLTP) application. The application will be deployed in a primary AWS Region (us-east-1) and must maintain a read-only reporting environment in a secondary AWS Region (us-west-2). The reporting environment must handle dynamic, high-load reporting queries and scale automatically. The disaster recovery KPIs require a Recovery Point Objective (RPO) of less than 1 second and a Recovery Time Objective (RTO) of less than 1 minute for a regional outage. All data at rest must be encrypted, and an audit team operating in a separate AWS account must be granted permissions to read and verify the encryption metadata. Which two database and storage configurations should the solutions architect select to meet these requirements?
- Deploy an Amazon Aurora Global Database with the primary cluster in us-east-1 and a secondary cluster in us-west-2, and configure Aurora Auto Scaling for the reader instances in the secondary region.Cevap
- Create a Customer Managed Key (CMK) in AWS KMS in the primary account, configure its key policy to delegate read permissions to the audit account's IAM principal, and encrypt the database clusters using this key.Cevap
- CDeploy an Amazon RDS for PostgreSQL Multi-AZ instance in us-east-1, and configure the standby instance in the secondary Availability Zone to serve reporting read traffic during peak periods.
- DEncrypt the database clusters using the AWS-managed KMS key (aws/rds) in the primary account, and modify the key policy to delegate access to the audit account's IAM roles.
- EConfigure Amazon RDS for PostgreSQL in us-east-1 with daily snapshot replication to us-west-2, and use an AWS Lambda function to automatically restore the snapshot to a new DB instance during a regional failover.