AWS Certified Solutions Architect – Associate (SAA-C03) — Question 176

A company stores data in an Amazon Aurora PostgreSQL DB cluster. The company must store all the data for 5 years and must delete all the data after 5 years. The company also must indefinitely keep audit logs of actions that are performed within the database. Currently, the company has automated backups configured for Aurora.

Which combination of steps should a solutions architect take to meet these requirements? (Choose two.)

Answer options

• A. Take a manual snapshot of the DB cluster.
• B. Create a lifecycle policy for the automated backups.
• C. Configure automated backup retention for 5 years.
• D. Configure an Amazon CloudWatch Logs export for the DB cluster.
• E. Use AWS Backup to take the backups and to keep the backups for 5 years.

Correct answer: D, E

Explanation

Options D and E are correct because configuring an Amazon CloudWatch Logs export allows for indefinite storage of audit logs from the database, while using AWS Backup enables retention of backups for the required 5-year period. Options A, B, and C do not meet the requirements for indefinite audit log storage or the specific retention policy needed for the data.