Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Amazon Exam SAA-C03 Topic 3 Question 41 Discussion

Actual exam question for Amazon's SAA-C03 exam
Question #: 41
Topic #: 3
[All SAA-C03 Questions]

A company has two AWS accounts: Production and Development. The company needs to push code changes in the Development account to the Production account. In the alpha phase, only two senior developers on the development team need access to the Production account. In the beta phase, more developers will need access to perform testing.

Which solution will meet these requirements?

Show Suggested Answer Hide Answer
Suggested Answer: B

This solution meets the requirements most cost-effectively because it enables the company to migrate its on-premises NFS data store to AWS without changing the existing applications or workflows. AWS Storage Gateway is a hybrid cloud storage service that provides seamless and secure integration between on-premises and AWS storage. Amazon S3 File Gateway is a type of AWS Storage Gateway that provides a file interface to Amazon S3, with local caching for low-latency access. By setting up an Amazon S3 File Gateway, the company can store and retrieve files as objects in Amazon S3 using standard file protocols such as NFS. The company can also use an Amazon S3 Lifecycle policy to automatically transition the data to the appropriate storage class based on the frequency of access and the cost of storage. For example, the company can use S3 Standard for frequently accessed data, S3 Standard-Infrequent Access (S3 Standard-IA) or S3 One Zone-Infrequent Access (S3 One Zone-IA) for less frequently accessed data, and S3 Glacier or S3 Glacier Deep Archive for long-term archival data.

Option A is not a valid solution because AWS Storage Gateway Volume Gateway is a type of AWS Storage Gateway that provides a block interface to Amazon S3, with local caching for low-latency access. Volume Gateway is not suitable for migrating an NFS data store, as it requires attaching the volumes to EC2 instances or on-premises servers using the iSCSI protocol. Option C is not a valid solution because Amazon Elastic File System (Amazon EFS) is a fully managed elastic NFS file system that is designed for workloads that require high availability, scalability, and performance. Amazon EFS Standard-Infrequent Access (Standard-IA) is a storage class within Amazon EFS that is optimized for infrequently accessed files, with a lower price per GB and a higher price per access. Using Amazon EFS Standard-IA for migrating an NFS data store would not be cost-effective, as it would incur higher access charges and require additional configuration to enable lifecycle management. Option D is not a valid solution because Amazon EFS One Zone-Infrequent Access (One Zone-IA) is a storage class within Amazon EFS that is optimized for infrequently accessed files that do not require the availability and durability of Amazon EFS Standard or Standard-IA. Amazon EFS One Zone-IA stores data in a single Availability Zone, which reduces the cost by 47% compared to Amazon EFS Standard-IA, but also increases the risk of data loss in the event of an Availability Zone failure. Using Amazon EFS One Zone-IA for migrating an NFS data store would not be cost-effective, as it would incur higher access charges and require additional configuration to enable lifecycle management. It would also compromise the availability and durability of the data.


AWS Storage Gateway - Amazon Web Services

Amazon S3 File Gateway - AWS Storage Gateway

Object Lifecycle Management - Amazon Simple Storage Service

[AWS Storage Gateway Volume Gateway - AWS Storage Gateway]

[Amazon Elastic File System - Amazon Web Services]

[Using EFS storage classes - Amazon Elastic File System]

Contribute your Thoughts:

Staci
17 days ago
I'm picturing the senior devs logging into the Production account like secret agents, all stealthy-like. Option B is the spy-approved solution!
upvoted 0 times
...
Belen
21 days ago
You know, I was tempted by Option D at first, but then I realized it would be a pain to manage all those groups and permissions. Option B is definitely the winner here.
upvoted 0 times
Kathryn
14 hours ago
Option B allows for easy management of permissions and access for the senior developers in the alpha phase.
upvoted 0 times
...
...
Terry
27 days ago
Haha, I can just imagine the chaos if we gave all the developers direct access to the Production account. Option B keeps things nice and tidy.
upvoted 0 times
Kerry
17 hours ago
Agreed, it's important to maintain security and control access to sensitive environments like Production.
upvoted 0 times
...
Britt
3 days ago
That sounds like a good plan. We definitely don't want all developers having direct access to the Production account.
upvoted 0 times
...
Jeff
10 days ago
Option B: Use AWS Organizations to create a service control policy that allows only the two senior developers access to the Production account during the alpha phase.
upvoted 0 times
...
...
Latonia
1 months ago
I agree, Option B seems like the best choice. Allowing developers to assume the role in the Development account is a more controlled approach than granting direct access.
upvoted 0 times
Otis
14 days ago
Agreed. It's important to have a controlled approach when granting access to sensitive environments like Production.
upvoted 0 times
...
Armanda
21 days ago
I think so too. Direct access to the Production account can be risky, especially during the alpha phase.
upvoted 0 times
...
Victor
22 days ago
Option B is definitely the way to go. It's more secure to have developers assume a role in the Development account.
upvoted 0 times
...
...
Nicholle
1 months ago
Option B is the way to go. It's the most flexible and secure solution, allowing us to manage access to the Production account from the Development account.
upvoted 0 times
Tamala
3 days ago
I agree, it provides the flexibility we need to manage access.
upvoted 0 times
...
Fausto
29 days ago
Option B is definitely the best choice for this scenario.
upvoted 0 times
...
...
Kimberlie
2 months ago
I'm not sure. Option C also seems like a valid solution. Creating an IAM role in the Production account could work too.
upvoted 0 times
...
Sabine
2 months ago
I agree with Bettina. Creating an IAM role in the Development account seems like the most secure way to handle access.
upvoted 0 times
...
Bettina
2 months ago
I think option B is the best solution.
upvoted 0 times
...

Save Cancel