A company needs to migrate of historical data from an on-premises NFS file system to Amazon S3. The initial migration must be completed within 30 days. After the initial migration, the company needs to replicate daily incremental updates of approximately from the same NFS file system to Amazon S3. The company has a dedicated internet connection available for this migration. Security policies require that all data at rest in Amazon S3 be encrypted using a Customer Managed Key (CMK) in AWS KMS, and the migration process must minimize administrative overhead. Which two actions should a Solutions Architect recommend to meet these requirements?
- Order multiple AWS Snowball Edge Storage Optimized devices, copy the initial dataset locally to the devices, and ship them to AWS to import the data into the Amazon S3 bucket.Cevap
- Deploy an AWS DataSync agent on-premises, configure the source location as the NFS file system and the destination location as the Amazon S3 bucket, and schedule a daily task to replicate the incremental updates.Cevap
- CDeploy AWS DataSync agents on-premises, and configure a migration task to transfer the initial dataset over the dedicated internet connection to the Amazon S3 bucket.
- DConfigure AWS Transfer Family with an SFTP endpoint in a VPC, configure a Transit Gateway with a Direct Connect gateway to route the SFTP traffic, and run an on-premises script to migrate the initial dataset over the network.
- EConfigure the AWS Snowball Edge devices to encrypt the migrated data using the AWS-managed KMS key for Amazon S3 (`aws/s3`) to simplify key management during the import process.
Cevap
Order multiple AWS Snowball Edge Storage Optimized devices to import the initial 500 TB dataset into the Amazon S3 bucket, and deploy an AWS DataSync agent on-premises to sync the daily 50 GB incremental updates to Amazon S3.
Using multiple AWS Snowball Edge Storage Optimized devices for the initial transfer is correct because copying the data locally and shipping it physically bypasses the 100 Mbps network constraint, which would otherwise take over a year. Deploying AWS DataSync on-premises is correct because it provides an automated, managed mechanism to sync the daily 50 GB updates over the network link in about 1 hour with minimal administration.
Adım Adım Çözüm
Anahtar Kavram
Selecting data transfer strategies requires balancing network bandwidth constraints against data volume and timelines (the online vs. offline decision matrix). For initial bulk migrations where network transfer time exceeds the timeline, offline shipping with AWS Snowball Edge is required. For ongoing incremental updates that fit within the available network capacity, automated replication via AWS DataSync minimizes operational overhead. Additionally, AWS Snowball Edge require Customer Managed KMS keys (CMKs) rather than AWS-managed keys to allow custom policy delegation.