Examkin

Soru

Zorluk: OrtaLarge-Scale Data Transfer using Snow Family, DataSync, and Transfer Family

An enterprise is planning to migrate two datasets from its on-premises data center to AWS within a 3030-day migration window. The enterprise has a dedicated 1 Gbps1\text{ Gbps} AWS Direct Connect connection. The datasets consist of:

* A 1.5 PB1.5\text{ PB} static archive of seismic research data stored on an NFS v4 file system. This dataset must be migrated to Amazon S3 Standard and encrypted at rest using a Key Management Service (KMS) key.
* An active 75 TB75\text{ TB} engineering dataset stored on an SMB file share. This dataset must be migrated to Amazon FSx for Windows File Server and must remain continuously synchronized with on-premises changes until the final cutover on day 3030.

Which two actions should the solutions architect recommend to complete this migration within the timeline?

  1. Deploy the AWS DataSync agent on-premises. Configure a DataSync task with the SMB share as the source and the Amazon FSx for Windows File Server file system as the destination, scheduling the task to run incrementally.Cevap
  2. B
    Configure an AWS DataSync task to transfer the NFS dataset directly to the Amazon S3 bucket over the Direct Connect connection, utilizing maximum bandwidth settings.
  3. C
    Order AWS Snowball Edge Storage Optimized devices for the NFS dataset. Configure the import job to encrypt the target Amazon S3 bucket using the AWS-managed KMS key (aws/s3).
  4. Order AWS Snowball Edge Storage Optimized devices for the NFS dataset. Use a customer managed KMS key to encrypt the data, ensuring the key policy grants the necessary permissions to the Snowball service principal.Cevap
  5. E
    Order an additional AWS Snowball Edge Storage Optimized device for the SMB dataset. Configure the import job to load the data directly into the Amazon FSx for Windows File Server file system, and perform final delta syncs using an IPsec VPN.

Cevap

Deploy the AWS DataSync agent to synchronize the SMB share with Amazon FSx for Windows File Server, and order AWS Snowball Edge Storage Optimized devices using a customer managed KMS key for the NFS dataset migration.
The correct strategy combines online and offline tools based on bandwidth limits. Transferring 1.5 PB1.5\text{ PB} over 1 Gbps1\text{ Gbps} takes over 138138 days, so AWS Snowball Edge Storage Optimized devices must be used. Snowball Edge requires a customer managed key (CMK) for KMS encryption because AWS-managed keys do not allow the key policy modifications needed for the Snowball service principal. Meanwhile, the 75 TB75\text{ TB} active SMB dataset can be transferred over the network within 77 days. Using AWS DataSync with an on-premises agent allows continuous, incremental synchronization directly to Amazon FSx for Windows File Server.

Adım Adım Çözüm

1
Calculate network migration timeline for the 1.5 PB1.5\text{ PB} NFS archive.
At 1 Gbps1\text{ Gbps} bandwidth, transferring 1.5 PB1.5\text{ PB} (1500 TB1500\text{ TB}) takes approximately 1500×1012 bytes125×106 bytes/sec≈12,000,000 seconds≈138.8\frac{1500 \times 10^{12} \text{ bytes}}{125 \times 10^6 \text{ bytes/sec}} \approx 12,000,000 \text{ seconds} \approx 138.8 days.
This exceeds the 3030-day migration limit, indicating that offline transfer via AWS Snowball Edge is required.
2
Calculate network migration timeline and strategy for the active 75 TB75\text{ TB} SMB share.
At 1 Gbps1\text{ Gbps} bandwidth, transferring 75 TB75\text{ TB} takes approximately 77 days of network transfer, which easily fits within the 3030-day window.
Since the dataset is active and needs continuous synchronization, AWS DataSync is selected as it supports SMB source locations, FSx for Windows File Server destinations, and incremental scans.
3
Address the KMS encryption requirement for the Snowball Edge import job.
Identify that AWS-managed KMS keys (e.g., `aws/s3`) cannot be configured with Snowball Edge import jobs because their key policies cannot be modified.
A customer managed KMS key must be created, and its policy must explicitly grant the Snowball service principal permissions to perform key operations.

Anahtar Kavram

Selecting data transfer services based on bandwidth constraints, storage protocol compatibility, and KMS encryption limitations.
Tahmini Süre:3m 0s
Bu soruyu puanla

Konular

Large-Scale Data Transfer using Snow Family, DataSync, and Transfer Family

Bu konudan daha fazla soru