AWS Certified Solutions Architect – Associate (SAA-C02) — Question 200

A company wants to share forensic accounting data that is stored in an Amazon RDS DB instance with an external auditor. The auditor has its own AWS account and requires its own copy of the database.
How should the company securely share the database with the auditor?

Answer options

• A. Create a read replica of the database and configure IAM standard database authentication to grant the auditor access.
• B. Copy a snapshot of the database to Amazon S3 and assign an IAM role to the auditor to grant access to the object in that bucket.
• C. Export the database contents to text files, store the files in Amazon S3, and create a new IAM user for the auditor with access to that bucket.
• D. Make an encrypted snapshot of the database, share the snapshot, and allow access to the AWS Key Management Service (AWS KMS) encryption key.

Correct answer: D

Explanation

The correct answer is D because sharing an encrypted snapshot ensures that the data remains secure and only accessible by the auditor with the appropriate permissions to the AWS KMS key. Option A does not provide a separate copy of the database, and options B and C do not ensure the same level of security and control over the data as an encrypted snapshot does.