Q17 — AWS SAA-C03 Ch.14

Question 17 of 100 | ← Chapter 14

Q1017. A company wants to move its application to a serverless solution. The serverless solution needs to analyze existing data and new data by using SQL. The company stores the data in an Amazon S3 bucket. The data must be encrypted at rest and replicated to a different AWS Region.Which solution will meet these requirements with the LEAST operational overhead?

Correct Answer: C. Configure Cross-Region Replication (CRR) on the existing S3 bucket. Use server-side encryption with Amazon S3 managed keys (SSE-S3). Use Amazon Athena to query the data.

Explanation

A OR C.To meet the requirements of moving the application to a serverless solution that analyzes both existing and new data stored in an Amazon S3 bucket, while ensuring the data is encrypted at rest and replicated to a different AWS Region, the best solution is:C. Configure Cross-Region Replication (CRR) on the existing S3 bucket. Use server-side encryption with Amazon S3 managed keys (SSE-S3). Use Amazon Athena to query the data.Explanation:\1. Cross-Region Replication (CRR): - Configuring CRR on the existing S3 bucket allows for automatic replication of objects to another S3 bucket in a different AWS Region. This ensures data durability and availability across regions.\2. Server-Side Encryption with SSE-S3: - Using Amazon S3 managed keys (SSE-S3) provides encryption at rest without requiring additional management overhead. It is simple to implement and does not require configuration of KMS keys.\3. Amazon Athena: - Athena is a serverless query service that enables you to analyze data stored in S3 using standard SQL. It seamlessly integrates with S3, allowing for easy querying of both existing and newly replicated data.Evaluation of Other Options:A. Create a new S3 bucket that uses server-side encryption with AWS KMS multi-Region keys (SSE-KMS): - While this provides strong encryption, creating a new bucket involves additional overhead for moving data and managing KMS keys. Using Athena is good, but the additional complexity is a drawback.B. Create a new S3 bucket that uses server-side encryption with Amazon S3 managed keys (SSE-S3): - While using SSE-S3 is straightforward, creating a new bucket and moving data adds operational complexity and overhead. Additionally, using Amazon RDS would not be as efficient as using Athena for querying data in S3.D. Configure S3 Cross-Region Replication (CRR) on the existing S3 bucket with SSE-KMS: - Similar to option A, using KMS adds complexity and management overhead regarding the keys. Moreover, querying the data with RDS instead of Athena is not optimal for analyzing S3 data.Conclusion:Option C provides the best balance of simplicity, minimal operational overhead, and meets all the requirements for securely managing and analyzing the data with a serverless architecture.