Soru

Zorluk: Çok zorHigh Availability and Disaster Recovery Design

A global e-commerce analytics enterprise is designing a transaction logging platform. The primary infrastructure must run in us-east-1 with a disaster recovery (DR) site in us-west-2. The business requirements specify a Recovery Time Objective (RTO) of 5 minutes, a Recovery Point Objective (RPO) of 1 minute, and a strict requirement that public client traffic be routed based on user geolocation under normal circumstances, with automated failover if a regional endpoint degrades. The solution must minimize cost where possible while ensuring high availability across Availability Zones for outbound regulatory compliance logging. Which two of the following architectural configurations must the Solutions Architect implement to satisfy these requirements?

  1. Deploy an Amazon Aurora Global Database with the primary cluster in us-east-1 and a secondary cluster in us-west-2. In a disaster recovery event, use AWS Route 53 Application Recovery Controller (ARC) to initiate a failover and promote the secondary cluster to primary write status.Cevap
  2. Create Route 53 Geolocation routing records at the root domain level pointing to Route 53 Failover routing records for each region. Configure the failover records to direct traffic to regional Application Load Balancers, associated with Route 53 health checks of the local application stack.Cevap
  3. C
    Deploy a single NAT Gateway in one public subnet of each region's VPC, configuring the route tables of all private subnets across multiple Availability Zones to route egress traffic through this gateway to reduce costs.
  4. D
    Configure a Route 53 Private Hosted Zone for the public domain and associate it with the VPCs in both regions, using latency-based routing policies to distribute incoming external client requests to the nearest regional load balancer.
  5. E
    Establish a Multi-AZ Amazon RDS PostgreSQL instance in us-east-1 with cross-region read replicas in us-west-2. Enable Aurora replica auto-scaling on the standby database instances to handle write transactions immediately after failover.
  6. F
    Utilize a Pilot Light disaster recovery strategy by scheduling database snapshots every hour, replicating them to us-west-2, and maintaining a stopped set of Amazon EC2 application instances in us-west-2 that are started via AWS Lambda during failover.

Cevap

Deploy an Amazon Aurora Global Database with Route 53 Application Recovery Controller (ARC) for database failover, and configure nested Route 53 Geolocation and Failover routing records to direct traffic to regional Application Load Balancers.
The correct architecture uses Amazon Aurora Global Database to achieve sub-second data replication across regions, meeting the 1-minute RPO, and relies on AWS Route 53 Application Recovery Controller (ARC) to quickly promote the secondary cluster during a failover to meet the 5-minute RTO. For routing, nesting Geolocation routing records to point to regional Failover records ensures traffic is routed by location under normal operations while enabling failover to the alternate region if the local ALB health check fails.

Adım Adım Çözüm

1
Analyze RTO and RPO limits to select the database replication strategy.
Amazon Aurora Global Database provides asynchronous replication with lag under 1 second, matching the 1-minute RPO. Coordinated failover using Route 53 Application Recovery Controller ensures the secondary cluster can be promoted in under a minute, matching the 5-minute RTO.
Standard replication methods or snapshot copies fail the RPO and RTO bounds.
2
Evaluate global DNS routing and failover requirements.
Configure root Geolocation records pointing to nested regional Failover records. Associate health checks with the regional Application Load Balancers.
This setup allows Route 53 to perform geolocation routing under normal operation, but dynamically fail over to the secondary region if a whole region becomes degraded.
3
Determine the high availability requirements for NAT Gateways.
To ensure high availability across Availability Zones, a NAT Gateway must be deployed in each Availability Zone where outbound egress is needed.
Deploying a single NAT Gateway introduces a single point of failure for instances running in other Availability Zones.

Anahtar Kavram

Multi-region high availability and disaster recovery design combining database replication and DNS failover strategies to meet strict RTO and RPO targets.
Bu soruyu puanla