Examkin

Soru

Zorluk: ZorS3 Reliability and Replication

A SysOps Administrator is managing an Amazon S3 Cross-Region Replication (CRR) setup between a source bucket in us-east-1 and a destination bucket in us-west-2. The buckets store critical application logs encrypted with AWS KMS customer managed keys (CMKs) in both regions. The administrator notes two issues: existing logs uploaded before replication was enabled are missing from the destination bucket, and when users delete logs in the source bucket, the corresponding delete markers are not appearing in the destination bucket. Which combination of actions should the administrator take to resolve these issues? (Select TWO.)

  1. Create an Amazon S3 Batch Replication job to replicate the objects that were present in the source bucket before replication was enabled.Cevap
  2. Update the replication rule in the source bucket configuration to enable delete marker replication.Cevap
  3. C
    Suspend versioning on the destination bucket to allow delete markers to replicate without generating version conflicts.
  4. D
    Grant the replication IAM role kms:Decrypt permissions on the destination KMS key within its key policy.
  5. E
    Ensure the replication IAM role has the iam:PassRole permission for the destination bucket's access control list (ACL).

Cevap

Create an Amazon S3 Batch Replication job to replicate the objects that were present in the source bucket before replication was enabled, and update the replication rule in the source bucket configuration to enable delete marker replication.
To replicate objects that existed before replication was configured, Amazon S3 Batch Replication must be used. Additionally, to propagate delete markers resulting from simple delete operations on the source bucket, delete marker replication must be explicitly enabled in the replication rule.

Adım Adım Çözüm

1
Address the replication of existing objects.
Determine that S3 replication only automatically replicates new objects or updates after the rule is configured. For existing objects, S3 Batch Replication must be initiated.
This copies objects that existed prior to replication enablement.
2
Address the replication of delete markers.
Recognize that by default, S3 does not replicate delete markers from the source to the destination bucket. Enable the delete marker replication option in the replication rule settings.
This ensures that simple deletes in the source bucket propagate as delete markers in the destination bucket.
3
Validate the prerequisites for replication.
Ensure that versioning remains enabled on both buckets and that the IAM replication role has correct permissions (decrypting source objects and encrypting/writing to the destination).
Ensures the entire replication process remains functional without breaking security or versioning constraints.

Anahtar Kavram

Amazon S3 replication options for existing objects and delete markers.
Bu soruyu puanla

Konular

S3 Reliability and Replication

Bu konudan daha fazla soru