Exam AWS Certified DevOps Engineer - Professional DOP-C02 topic 1 question 36 discussion

Exam question from Amazon's AWS Certified DevOps Engineer - Professional DOP-C02

Question #: 36
Topic #: 1

[All AWS Certified DevOps Engineer - Professional DOP-C02 Questions]

A DevOps engineer needs to back up sensitive Amazon S3 objects that are stored within an S3 bucket with a private bucket policy using S3 cross-Region replication functionality. The objects need to be copied to a target bucket in a different AWS Region and account.
Which combination of actions should be performed to enable this replication? (Choose three.)

A. Create a replication IAM role in the source account
B. Create a replication I AM role in the target account.
C. Add statements to the source bucket policy allowing the replication IAM role to replicate objects.
D. Add statements to the target bucket policy allowing the replication IAM role to replicate objects.
E. Create a replication rule in the source bucket to enable the replication.
F. Create a replication rule in the target bucket to enable the replication.

Show Suggested Answer

Suggested Answer: ADE 🗳️

by ele at April 15, 2023, 4:39 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

tschenhau

Highly Voted 1 year, 9 months ago

Selected Answer: ADE

S3 cross-Region replication (CRR) automatically replicates data between buckets across different AWS Regions. To enable CRR, you need to add a replication configuration to your source bucket that specifies the destination bucket, the IAM role, and the encryption type (optional). You also need to grant permissions to the IAM role to perform replication actions on both the source and destination buckets. Additionally, you can choose the destination storage class and enable additional replication options such as S3 Replication Time Control (S3 RTC) or S3 Batch Replication.

upvoted 7 times

...

Gomer

Most Recent 8 months, 2 weeks ago

Selected Answer: ADE

Tricky question because they are trying to get one to confuse the "enable" replicaton "role"/policy ("rule") in source account with the "allow" replicaton role/"policy" in target account. These references helped me work up some summary steps: Steps to configure S3 replication between different accounts 1. Create source and destination buckets in different accounts and regions (acctA, acctB) 2. Enable versioning on the buckets (acctA, acctB) 3. Create IAM role and attach a policy granting S3 permission to replicate objects (acctA) 4. Add the replication configuration to source bucket (acctA) 5. Add bucket "policy on the destination bucket to allow" objects replication (acctB)(req. 2nd role) https://docs.aws.amazon.com/AmazonS3/latest/userguide/replication-walkthrough1.html#enable-replication https://docs.aws.amazon.com/AmazonS3/latest/userguide/replication-walkthrough-2.html

upvoted 4 times

Gomer

8 months, 2 weeks ago

Source Account: (Source Bucket)(Versioning)(Role/Policy to "Enable" Replicaton) Target Account: (Target Bucket)(Versioning)(Role/Policy to "Allow" Replicaton)

upvoted 2 times

...

thanhnv142

1 year ago

ADF is correct: this task is done by S3 itself A: Create role in the source to allow S3 access permission D: add policy to allow repication in the target E: enable replication in the source

upvoted 2 times

...