AWS Certified Solutions Architect – Professional — Question 693

A company has a legacy monolithic application that is critical to the company's business. The company hosts the application on an Amazon EC2 instance that runs Amazon Linux 2. The company's application team receives a directive from the legal department to back up the data from the instance's encrypted Amazon
Elastic Block Store (Amazon EBS) volume to an Amazon S3 bucket. The application team does not have the administrative SSH key pair for the instance. The application must continue to serve the users.
Which solution will meet these requirements?

Answer options

• A. Attach a role to the instance with permission to write to Amazon S3. Use the AWS Systems Manager Session Manager option to gain access to the instance and run commands to copy data into Amazon S3.
• B. Create an image of the instance with the reboot option turned on. Launch a new EC2 instance from the image. Attach a role to the new instance with permission to write to Amazon S3. Run a command to copy data into Amazon S3.
• C. Take a snapshot of the EBS volume by using Amazon Data Lifecycle Manager (Amazon DLM). Copy the data to Amazon S3.
• D. Create an image of the instance. Launch a new EC2 instance from the image. Attach a role to the new instance with permission to write to Amazon S3. Run a command to copy data into Amazon S3.

Correct answer: C

Explanation

Amazon Data Lifecycle Manager (Amazon DLM) provides an automated way to create snapshots of Amazon EBS volumes without requiring SSH access or interrupting the running application. Because EBS snapshots are inherently backed up and stored in Amazon S3, this solution meets the backup requirement with zero downtime. Other options either require invasive instance configuration modifications or unnecessary duplication of the EC2 instance, which could cause application disruption.