A SysOps Administrator is setting up Amazon S3 Same-Region Replication (SRR) between a source bucket and a destination bucket in the same AWS account. The administrator enables versioning on the source bucket, creates an IAM role with the necessary S3 permissions, and defines the replication configuration. When the administrator runs the AWS CLI command `aws s3api put-bucket-replication` to apply the configuration, the command fails with an error. Which of the following is the most likely cause of this failure?
- The destination bucket does not have S3 versioning enabled.Cevap
- BThe IAM user running the CLI command is missing the iam:PassRole permission to pass the replication role to the Amazon S3 service.
- CThe KMS key policy for the destination bucket's default KMS encryption fails to allow the replication IAM role to perform key operations.
- DThe replication IAM role's trust relationship policy contains specific S3 bucket action permissions rather than trust permissions for the service principal.
Cevap
The destination bucket does not have S3 versioning enabled.
Amazon S3 replication requires versioning to be enabled on both the source and destination buckets. If versioning is not enabled on the destination bucket, S3 will reject the replication configuration with an error when attempting to apply it.
Adım Adım Çözüm
Anahtar Kavram
Amazon S3 replication requires bucket versioning to be enabled on both the source and destination buckets.