Q58 — AWS SAA-C03 Ch.12

Question 58 of 100 | ← Chapter 12

Q858. A company has an on-premises SFTP file transfer solution. The company is migrating to the AWS Cloud to scale the file transfer solution and to optimize costs by using Amazon S3. The company's employees will use their credentials for the on-premises Microsoft Active Directory (AD) to access the new solution. The company wants to keep the current authentication and file access mechanisms.Which solution will meet these requirements with the LEAST operational overhead?

Correct Answer: C. Create an AWS Transfer Family server with SFTP endpoints. Choose the AWS Directory Service option as the identity provider. Use AD Connector to connect the on-premises Active Directory.

Explanation

To meet the requirements of migrating to the AWS Cloud while keeping the current authentication and file access mechanisms with the LEAST operational overhead, the recommended solution is:C. Create an AWS Transfer Family server with SFTP endpoints. Choose the AWS Directory Service option as the identity provider. Use AD Connector to connect the on-premises Active Directory.Here's why:Option C suggests creating an AWS Transfer Family server with SFTP endpoints and using the AWS Directory Service option as the identity provider. By using the AWS Directory Service, specifically AD Connector, you can connect the on-premises Microsoft Active Directory (AD) to the AWS environment.With this solution, the company can leverage their existing AD credentials for authentication, allowing employees to use their on-premises AD credentials to access the new file transfer solution in AWS. The AWS Transfer Family service provides the SFTP endpoints, which can be accessed securely by the employees.Using AD Connector allows the company to maintain their current authentication and file access mechanisms without significant changes or operational overhead. AD Connector is a lightweight directory gateway that enables on-premises AD authentication with AWS services without the need for complex directory synchronization or replication.Option A suggests configuring an S3 File Gateway with SMB file shares that use the existing Active Directory to authenticate. While this solution may provide integration with the existing AD, it introduces the overhead of configuring and managing the S3 File Gateway, which may not be necessary for the file transfer requirements.Option B suggests configuring an Auto Scaling group with Amazon EC2 instances to run an SFTP solution. While this solution provides flexibility and scalability, it introduces additional operational overhead, as managing EC2 instances and auto scaling groups requires ongoing maintenance and monitoring.Option D suggests creating an AWS Transfer Family SFTP endpoint and configuring it to use the AWS Directory Service option as the identity provider to connect to the existing Active Directory. This option is similar to option C but does not specifically mention using AD Connector. AD Connector is the recommended approach for connecting the on-premises Active Directory to AWS in this scenario.In summary, the recommended solution is to create an AWS Transfer Family server with SFTP endpoints, choose the AWS Directory Service option as the identity provider, and use AD Connector to connect the on-premises Active Directory. This solution allows the company to keep their current authentication and file access mechanisms with minimal operational overhead.