AWS Certified Solutions Architect - Associate
Get started today
Ultimate access to all questions.
Deep dive into the quiz with AI chat providers.
We prepare a focused prompt with your quiz and certificate details so each AI can offer a more tailored, in-depth explanation.
A company stores data in an Amazon Aurora PostgreSQL DB cluster. The company must store all the data for 5 years and must delete all the data after 5 years. The company also must indefinitely keep audit logs of actions that are performed within the database. Currently, the company has automated backups configured for Aurora.
Which combination of steps should a solutions architect take to meet these requirements? (Choose two.)
Other
Community
UAnonymous
A
Take a manual snapshot of the DB cluster.
B
Create a lifecycle policy for the automated backups.
C
Configure automated backup retention for 5 years.
D
Configure an Amazon CloudWatch Logs export for the DB cluster.
E
Use AWS Backup to take the backups and to keep the backups for 5 years.
Explanation:
Explanation
Correct Answers: E and D
Why E is correct:
- AWS Backup provides centralized backup management for AWS services including Amazon Aurora
- AWS Backup allows you to set retention policies for backups (up to 100 years)
- You can configure AWS Backup to automatically delete backups after 5 years
- This meets the requirement to store data for exactly 5 years and delete it afterwards
Why D is correct:
- Amazon Aurora PostgreSQL supports exporting database logs to Amazon CloudWatch Logs
- CloudWatch Logs can be configured for indefinite retention
- This meets the requirement to indefinitely keep audit logs of actions performed within the database
Why other options are incorrect:
A (Take a manual snapshot):
- Manual snapshots don't automatically expire after 5 years
- You would need to manually delete them, which is error-prone
- Doesn't provide automated lifecycle management
B (Create a lifecycle policy for the automated backups):
- Aurora automated backups have a maximum retention period of 35 days
- You cannot configure them for 5 years
- Lifecycle policies for automated backups don't exist in Aurora
C (Configure automated backup retention for 5 years):
- Aurora automated backups have a maximum retention period of 35 days
- Cannot be configured for 5 years
- This option is not technically possible with Aurora's native automated backups
Key AWS Services Used:
- AWS Backup: For automated backup management with configurable retention policies
- Amazon CloudWatch Logs: For indefinite retention of database audit logs
- Amazon Aurora PostgreSQL: For database log export capabilities
Best Practice: Using AWS Backup provides better governance, compliance reporting, and centralized management compared to manual snapshot management.
Comments
Loading comments...