AWS Certified Solutions Architect – Associate (SAA-C03) — Question 466

A company wants to migrate 100 GB of historical data from an on-premises location to an Amazon S3 bucket. The company has a 100 megabits per second (Mbps) internet connection on premises. The company needs to encrypt the data in transit to the S3 bucket. The company will store new data directly in Amazon S3.

Which solution will meet these requirements with the LEAST operational overhead?

Answer options

• A. Use the s3 sync command in the AWS CLI to move the data directly to an S3 bucket
• B. Use AWS DataSync to migrate the data from the on-premises location to an S3 bucket
• C. Use AWS Snowball to move the data to an S3 bucket
• D. Set up an IPsec VPN from the on-premises location to AWS. Use the s3 cp command in the AWS CLI to move the data directly to an S3 bucket

Correct answer: B

Explanation

AWS DataSync is a fully managed service that automates and accelerates data transfers between on-premises storage and S3 while natively securing data in transit, making it the option with the lowest operational overhead. Using AWS CLI commands (A and D) requires manual setup, monitoring, and scripting, while establishing an IPsec VPN (D) adds unnecessary infrastructure overhead. AWS Snowball (C) is intended for petabyte-scale transfers and is highly inefficient and costly for migrating a small payload of only 100 GB.