A financial services company is designing a highly available, multi-region credit scoring application deployed across `us-east-1` (primary) and `us-west-2` (secondary). The application runs on Amazon EC2 instances in private subnets across multiple Availability Zones behind Application Load Balancers. The EC2 instances must fetch external credit bureau data over the internet. The database must support low-latency transactions and scale reads horizontally. The business specifies a disaster recovery (DR) objective of a 15-minute RTO and a 1-minute RPO. Which two of the following architecture choices should the solutions architect make to satisfy these design requirements?
- Configure an Amazon Aurora Global Database with the primary cluster in `us-east-1` and a secondary cluster in `us-west-2` to achieve low-latency cross-region replication and meet the RPO and RTO objectives.Cevap
- Provision a NAT Gateway in each Availability Zone of the VPCs in both regions, and configure private subnet route tables to target their local NAT Gateway for outbound traffic.Cevap
- CDeploy Amazon RDS for PostgreSQL with Multi-AZ enabled in the primary region, and configure the application to route read-heavy queries directly to the RDS standby replica in the secondary Availability Zone.
- DDeploy a single NAT Gateway in a single public subnet in the primary region, and point the private route tables of all other Availability Zones to this NAT Gateway to reduce ongoing gateway hourly charges.
- ECreate a Route 53 Private Hosted Zone for the internal API domain, associate it with the primary VPC, and peered regions using AWS Transit Gateway to automatically resolve the domain in the secondary region.
- FCreate a backup plan in AWS Backup to take daily snapshots of the database, copy them to the secondary region, and configure an AWS Lambda function to automatically restore the database during a failover event.
Cevap
The correct options are configuring an Amazon Aurora Global Database for cross-region replication and provisioning a NAT Gateway in each Availability Zone for redundant outbound traffic.
Deploying Amazon Aurora Global Database ensures cross-region replication lag is under 1 second, meeting the 1-minute RPO, and failover/promotion takes less than a minute, satisfying the 15-minute RTO. Additionally, placing a NAT Gateway in each Availability Zone eliminates a single point of failure for outbound connections from EC2 instances in private subnets.
Adım Adım Çözüm
Anahtar Kavram
Designing for multi-region disaster recovery requires low-latency database replication matching RTO/RPO and redundant routing components across Availability Zones to avoid single points of failure.
Tahmini Süre:2m 30s