AWS Certified Solutions Architect – Associate (SAA-C03) — Question 517

A company is migrating its workloads to AWS. The company has transactional and sensitive data in its databases. The company wants to use AWS Cloud solutions to increase security and reduce operational overhead for the databases.

Which solution will meet these requirements?

Answer options

• A. Migrate the databases to Amazon EC2. Use an AWS Key Management Service (AWS KMS) AWS managed key for encryption.
• B. Migrate the databases to Amazon RDS Configure encryption at rest.
• C. Migrate the data to Amazon S3 Use Amazon Macie for data security and protection
• D. Migrate the database to Amazon RDS. Use Amazon CloudWatch Logs for data security and protection.

Correct answer: B

Explanation

Amazon RDS is a fully managed database service that significantly reduces operational overhead by automating tasks like hardware provisioning, database setup, patching, and backups. Enabling encryption at rest on Amazon RDS secures the sensitive transactional data with minimal effort, whereas Amazon EC2 requires manual administrative management. Amazon S3 is not designed for transactional relational databases, and CloudWatch Logs is a monitoring service rather than a primary data protection mechanism.