AWS Certified Solutions Architect - Associate
Get started today
Ultimate access to all questions.
Deep dive into the quiz with AI chat providers.
We prepare a focused prompt with your quiz and certificate details so each AI can offer a more tailored, in-depth explanation.
A company is migrating its workloads to AWS. The company has transactional and sensitive data in its databases. The company wants to use AWS Cloud solutions to increase security and reduce operational overhead for the databases.
Which solution will meet these requirements?
Other
Community
UAnonymous
A
Migrate the databases to Amazon EC2. Use an AWS Key Management Service (AWS KMS) AWS managed key for encryption.
B
Migrate the databases to Amazon RDS Configure encryption at rest.
C
Migrate the data to Amazon S3 Use Amazon Macie for data security and protection
D
Migrate the database to Amazon RDS. Use Amazon CloudWatch Logs for data security and protection.
Explanation:
Explanation
Correct Answer: B
Why Option B is correct:
- Amazon RDS provides a managed database service that reduces operational overhead compared to self-managed databases on EC2.
- Encryption at rest using AWS KMS keys provides strong security for sensitive data stored in the database.
- RDS handles encryption transparently, including automatic encryption of backups, snapshots, and read replicas.
- This solution addresses both requirements: increased security (through encryption) and reduced operational overhead (through managed service).
Why other options are incorrect:
Option A:
- Migrating to EC2 requires managing the database infrastructure yourself, which increases operational overhead rather than reducing it.
- While using AWS KMS for encryption provides security, the operational burden remains high.
Option C:
- Amazon S3 is not suitable for transactional database workloads; it's an object storage service.
- Amazon Macie is for discovering and protecting sensitive data in S3, not for transactional databases.
- This doesn't address the database migration requirement.
Option D:
- While Amazon RDS reduces operational overhead, CloudWatch Logs is for monitoring and logging, not for data encryption or primary security protection.
- CloudWatch Logs doesn't provide encryption at rest for the database itself.
Key AWS Services:
- Amazon RDS: Managed relational database service that reduces operational overhead
- Encryption at rest: Uses AWS KMS to encrypt data stored in RDS instances, backups, and snapshots
- AWS KMS: Managed encryption key service that integrates with RDS for encryption
Comments
Loading comments...