AWS Certified Database – Specialty — Question 233

A company runs an Amazon Aurora MySQL DB instance for one of its critical applications. The company’s marketing department sends promotional email messages to customers based on the data in this database. A database engineer needs to make the data from all the tables available in the company’s Amazon S3 data lake. The database engineer wants to perform an export from a snapshot to populate the S3 data lake with the contents of the database.

Which combination of steps will meet these requirements with the LEAST operational overhead? (Choose three.)

Answer options

• A. Use an existing automated snapshot or manual snapshot, or create a manual snapshot of the DB instance.
• B. Identify the S3 bucket for export. Provide access to the S3 bucket by using an IAM user. Attach an IAM policy with s3:PutObject*, s3:GetObject*, s3:ListBucket, s3:DeleteObject*, and s3:GetBucketLocation permissions to the IAM user. Attach the IAM role to the DB instance.
• C. Create a copy of an existing automated snapshot or manual snapshot of the DB instance.
• D. Create a symmetric AWS Key Management Service (AWS KMS) key for server-side encryption. Export the snapshot to Amazon S3.
• E. Identify the S3 bucket for export. Provide access to the S3 bucket by using an IAM role. Attach an IAM policy with s3:PutObject*, s3:GetQpject*, s3:ListBucket, s3:DeleteObject*, and s3:GetBucketLocation permissions to the IAM role. Attach the IAM role to the DB instance.
• F. Create a symmetric AWS Key Management Service (AWS KMS) key for server-side encryption. Export the snapshot to Amazon S3 Glacier Flexible Retrieval.

Correct answer: A, D, E

Explanation

The correct steps are A, D, and E. Option A is necessary to create a snapshot from which the data can be exported. Option D provides the required encryption for the exported data, while option E ensures that the correct access permissions through an IAM role are set up for the S3 bucket. Options B and C do not provide the necessary encryption process, and option F incorrectly suggests exporting to S3 Glacier, which is not suitable for this use case.