A software-as-a-service (SaaS) provider is launching a new collaborative task management application. The application will serve users globally, with primary traffic split between us-east-1 and eu-central-1. The database and storage strategy must meet the following requirements:
- Task metadata (OLTP workload): Requires a relational database schema with strong consistency for local reads, a recovery point objective (RPO) of less than 1 second, and a recovery time objective (RTO) of less than 1 minute. Outbound read scaling must automatically handle regional traffic spikes.
- User attachment uploads (Object storage): Must be replicated across both regions. Compliance regulations dictate that the data must be encrypted at rest using customer-controlled keys.
Which architecture should a solutions architect design to meet these requirements?
- ADeploy an Amazon RDS PostgreSQL database in a Multi-AZ configuration in us-east-1. Configure the application to route read traffic to the standby replica in the secondary Availability Zone during peak load. Store user attachments in an Amazon S3 bucket in us-east-1 with Cross-Region Replication (CRR) to a destination bucket in eu-central-1, encrypting the buckets with AWS KMS multi-Region customer managed keys.
- Deploy an Amazon Aurora PostgreSQL Global Database with the primary cluster in us-east-1 and a secondary cluster in eu-central-1. Configure Aurora Auto Scaling for reader instances in both regions. Store user attachments in an Amazon S3 bucket in us-east-1 with Cross-Region Replication (CRR) configured to a destination bucket in eu-central-1. Encrypt the S3 buckets using AWS KMS multi-Region customer managed keys.Cevap
- CDeploy an Amazon Aurora PostgreSQL database in us-east-1. Set up daily database backups and copy automated snapshots hourly to eu-central-1. In the event of a disaster, restore the database in eu-central-1 using an AWS CloudFormation template. Store user attachments in an Amazon S3 bucket in us-east-1 with Cross-Region Replication (CRR) to a destination bucket in eu-central-1, encrypting the buckets with AWS KMS multi-Region customer managed keys.
- DDeploy an Amazon Aurora PostgreSQL Global Database with the primary cluster in us-east-1 and a secondary cluster in eu-central-1. Configure Aurora Auto Scaling for reader instances in both regions. Store user attachments in an Amazon S3 bucket in us-east-1 with Cross-Region Replication (CRR) to a destination bucket in eu-central-1. Use the default AWS managed key (aws/s3) for S3 server-side encryption in both regions to minimize KMS configuration overhead.