Answer: Use AWS Backup to take the backups and to keep the backups for 5 years., Configure an Amazon CloudWatch Logs export for the DB cluster.

## Explanation **Correct Answers:** E and D **Why E is correct:** - AWS Backup provides centralized backup management for AWS services including Amazon Aurora - AWS Backup allows you to set retention policies for backups (up to 100 years) - You can configure AWS Backup to automatically delete backups after 5 years - This meets the requirement to store data for exactly 5 years and delete it afterwards **Why D is correct:** - Amazon Aurora PostgreSQL supports exporting database logs to Amazon CloudWatch Logs - CloudWatch Logs can be configured for indefinite retention - This meets the requirement to indefinitely keep audit logs of actions performed within the database **Why other options are incorrect:** **A (Take a manual snapshot):** - Manual snapshots don't automatically expire after 5 years - You would need to manually delete them, which is error-prone - Doesn't provide automated lifecycle management **B (Create a lifecycle policy for the automated backups):** - Aurora automated backups have a maximum retention period of 35 days - You cannot configure them for 5 years - Lifecycle policies for automated backups don't exist in Aurora **C (Configure automated backup retention for 5 years):** - Aurora automated backups have a maximum retention period of 35 days - Cannot be configured for 5 years - This option is not technically possible with Aurora's native automated backups **Key AWS Services Used:** 1. **AWS Backup:** For automated backup management with configurable retention policies 2. **Amazon CloudWatch Logs:** For indefinite retention of database audit logs 3. **Amazon Aurora PostgreSQL:** For database log export capabilities **Best Practice:** Using AWS Backup provides better governance, compliance reporting, and centralized management compared to manual snapshot management.

Author: LeetQuiz Editorial Team