Soru

Zorluk: OrtaHigh Availability and Disaster Recovery Design

An enterprise is designing a disaster recovery (DR) solution for a critical customer portal application. The primary environment is located in the us-east-1 Region, and the DR environment will be in the us-west-2 Region. The application requires a Recovery Time Objective (RTO) of 1515 minutes and a Recovery Point Objective (RPO) of 11 minute. The backend uses Amazon Aurora PostgreSQL, and the frontend/application tiers run on Amazon EC2 instances inside a private subnet. The EC2 instances must communicate with external payment gateways via the internet. The enterprise wants to adopt a cost-effective Warm Standby DR strategy.

Which TWO architecture decisions should the Solutions Architect implement to meet these requirements?

  1. Deploy an Amazon Aurora Global Database with the primary cluster in us-east-1 and a secondary cluster in us-west-2 containing a single database instance to serve as the warm standby, enabling sub-second replication.Cevap
  2. Configure Amazon Route 53 with a failover routing policy, associating health checks with the primary Application Load Balancer (ALB) to automatically redirect client traffic to the secondary ALB in us-west-2 during an outage.Cevap
  3. C
    Deploy a single NAT Gateway in us-east-1's primary Availability Zone to handle outbound payment gateway traffic for all private subnets across all Availability Zones, and mirror this single NAT Gateway configuration in us-west-2 to minimize ongoing costs.
  4. D
    Implement daily Aurora DB cluster snapshots, copy them to us-west-2, and use AWS CloudFormation to restore the database and spin up the application tier from scratch upon detecting a primary region outage.
  5. E
    Configure a Private Hosted Zone (PHZ) in Route 53 for internal service discovery in us-east-1, relying on cross-Region VPC peering to automatically resolve these private DNS names in us-west-2 without additional hosted zone association.

Cevap

Deploy an Amazon Aurora Global Database with a secondary cluster in us-west-2 containing a single database instance, and configure Amazon Route 53 with a failover routing policy and active health checks on the primary Application Load Balancer.
The correct solution involves deploying an Amazon Aurora Global Database with a secondary cluster containing a single replica in the warm standby region (providing sub-second RPO and under-minute promotion time) and setting up Route 53 with active-passive failover routing to automatically direct traffic to the secondary Application Load Balancer in the event of an outage in the primary region.

Adım Adım Çözüm

1
Analyze RTO and RPO requirements.
An RPO of 11 minute requires continuous database replication (such as Aurora Global Database's sub-second replication), ruling out backup/restore options. An RTO of 1515 minutes requires pre-provisioned or quickly provisioned resources in the DR region.
Ensures the selected disaster recovery strategy aligns with the business metrics.
2
Evaluate the database layer design.
Deploying Amazon Aurora Global Database with a single instance in the secondary region provides active-passive replication that satisfies the 11-minute RPO. The secondary cluster can be promoted to write mode within minutes, satisfying the 1515-minute RTO.
Determines the appropriate replication and recovery mechanisms for data persistence.
3
Design the traffic routing and high availability layers.
Configure Route 53 failover routing based on active health checks of the primary Application Load Balancer to redirect traffic. Ensure NAT Gateways are deployed redundantly in each Availability Zone to prevent single points of failure for outbound internet traffic.
Ensures client access can failover automatically and external communications remain highly available.

Anahtar Kavram

Designing a multi-region Warm Standby disaster recovery architecture that balances RTO, RPO, and high availability requirements.
Bu soruyu puanla