Soru

Zorluk: ZorEnhancing Reliability and Disaster Recovery

A retail company operates a multi-tier application across two AWS accounts within an AWS Organization. The primary infrastructure is located in us-east-1 (Account 1), and a disaster recovery (DR) site is set up in us-west-2 (Account 2). The database layer is an Amazon Aurora PostgreSQL Global Database with the primary cluster in us-east-1 and a read-only secondary cluster in us-west-2. Internal service names and database endpoints are resolved using a Route 53 private hosted zone corp.internal managed in Account 1. The company has a Recovery Time Objective (RTO) of 1515 minutes and a Recovery Point Objective (RPO) of 11 minute. During a DR drill, the failover fails because the secondary region's Application Load Balancer cannot resolve the database endpoints, and manual failover steps take too long. Which TWO actions should a Solutions Architect recommend to automate the failover and meet the RTO and RPO requirements?

  1. Associate the Route 53 private hosted zone corp.internal with the VPC in us-west-2 by authorizing the association from Account 1 and creating the association from Account 2.Cevap
  2. Use AWS Route 53 Application Recovery Controller (ARC) routing controls to redirect application traffic, and promote the secondary DB cluster in us-west-2 using the managed failover feature of Aurora Global Databases.Cevap
  3. C
    Create a duplicate Route 53 private hosted zone named corp.internal in Account 2 and associate it with the us-west-2 VPC, creating local database DNS records pointing to the secondary cluster.
  4. D
    Configure Route 53 failover routing records pointing directly to the private IP address of the primary DB instance, using a standard Route 53 health check that directly probes the database port to automate routing changes.
  5. E
    Transition the DR architecture to a pilot light model by deleting all database instances in the secondary Aurora cluster to reduce costs, and restore a new instance from a cross-region snapshot during failover.

Cevap

Associate the Route 53 private hosted zone corp.internal with the VPC in us-west-2 via cross-account authorization, and use Route 53 ARC along with Aurora Global Database managed failover to automate traffic shifting and database promotion.
To satisfy the requirements, the Solutions Architect must resolve the DNS resolution failure and automate database promotion. The private hosted zone in the primary account must be associated with the secondary VPC in the secondary account by authorizing the association from Account 1 and executing the association from Account 2. To automate the failover within the strict RTO/RPO objectives, the architect must use AWS Route 53 Application Recovery Controller (ARC) routing controls to redirect traffic and use the Aurora Global Database managed failover feature to promote the secondary DB cluster.

Adım Adım Çözüm

1
Submit a VPC hosted zone association authorization from the account owning the private hosted zone (Account 1) targeting the VPC in Account 2.
Permission is granted for Account 2's VPC to be associated with Account 1's private hosted zone.
Allows cross-account private DNS resolution so the DR VPC can resolve internal endpoints.
2
Associate the secondary VPC with the private hosted zone using Account 2 credentials.
The VPC in us-west-2 can now resolve the domain corp.internal.
Establishes name resolution parity in the secondary region during disaster recovery.
3
Use AWS Route 53 ARC to orchestrate routing failover, and initiate the managed failover (planned or unplanned) of the Aurora Global Database.
Traffic is shifted to the secondary region, and the secondary DB cluster is promoted to primary with minimal data loss.
Ensures the 15-minute RTO and 1-minute RPO targets are met using native automated replication failover.

Anahtar Kavram

Cross-Region Disaster Recovery for Aurora Global Databases and Route 53 DNS Configuration

Alternatif Yöntem

Rather than managed failover via Aurora Global Database, a customized automation pipeline using AWS EventBridge, AWS Step Functions, and API calls could execute the database promotion, but this introduces operational complexity compared to the native managed failover capability.
Tahmini Süre:3m 0s
Bu soruyu puanla