AWS Certified Developer – Associate — Question 58

A developer is deploying an application that will store files in an Amazon S3 bucket. The files must be encrypted at rest. The developer wants to automatically replicate the files to an S3 bucket in a different AWS Region for disaster recovery.
How can the developer accomplish this task with the LEAST amount of configuration?

Answer options

• A. Encrypt the files by using server-side encryption with S3 managed encryption keys (SSE-S3). Enable S3 bucket replication.
• B. Encrypt the files by using server-side encryption (SSE) with an AWS Key Management Service (AWS KMS) customer master key (CMK). Enable S3 bucket replication.
• C. Use the s3 sync command to sync the files to the S3 bucket in the other Region.
• D. Configure an S3 Lifecycle configuration to automatically transfer files to the S3 bucket in the other Region.

Correct answer: A

Explanation

The correct answer is A because using server-side encryption with S3 managed keys (SSE-S3) is straightforward and requires minimal configuration, along with enabling S3 bucket replication for automatic file copying. Option B, while also valid, involves additional configuration with AWS KMS which is not necessary for this task. Options C and D do not provide encryption at rest and do not meet the requirements of the question.