Independence Day Deal! Unlock 25% OFF Today – Limited-Time Offer - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Amazon Exam SAA-C03 Topic 3 Question 41 Discussion

Actual exam question for Amazon's SAA-C03 exam
Question #: 41
Topic #: 3
[All SAA-C03 Questions]

A company has two AWS accounts: Production and Development. The company needs to push code changes in the Development account to the Production account. In the alpha phase, only two senior developers on the development team need access to the Production account. In the beta phase, more developers will need access to perform testing.

Which solution will meet these requirements?

Show Suggested Answer Hide Answer
Suggested Answer: B

This solution meets the requirements most cost-effectively because it enables the company to migrate its on-premises NFS data store to AWS without changing the existing applications or workflows. AWS Storage Gateway is a hybrid cloud storage service that provides seamless and secure integration between on-premises and AWS storage. Amazon S3 File Gateway is a type of AWS Storage Gateway that provides a file interface to Amazon S3, with local caching for low-latency access. By setting up an Amazon S3 File Gateway, the company can store and retrieve files as objects in Amazon S3 using standard file protocols such as NFS. The company can also use an Amazon S3 Lifecycle policy to automatically transition the data to the appropriate storage class based on the frequency of access and the cost of storage. For example, the company can use S3 Standard for frequently accessed data, S3 Standard-Infrequent Access (S3 Standard-IA) or S3 One Zone-Infrequent Access (S3 One Zone-IA) for less frequently accessed data, and S3 Glacier or S3 Glacier Deep Archive for long-term archival data.

Option A is not a valid solution because AWS Storage Gateway Volume Gateway is a type of AWS Storage Gateway that provides a block interface to Amazon S3, with local caching for low-latency access. Volume Gateway is not suitable for migrating an NFS data store, as it requires attaching the volumes to EC2 instances or on-premises servers using the iSCSI protocol. Option C is not a valid solution because Amazon Elastic File System (Amazon EFS) is a fully managed elastic NFS file system that is designed for workloads that require high availability, scalability, and performance. Amazon EFS Standard-Infrequent Access (Standard-IA) is a storage class within Amazon EFS that is optimized for infrequently accessed files, with a lower price per GB and a higher price per access. Using Amazon EFS Standard-IA for migrating an NFS data store would not be cost-effective, as it would incur higher access charges and require additional configuration to enable lifecycle management. Option D is not a valid solution because Amazon EFS One Zone-Infrequent Access (One Zone-IA) is a storage class within Amazon EFS that is optimized for infrequently accessed files that do not require the availability and durability of Amazon EFS Standard or Standard-IA. Amazon EFS One Zone-IA stores data in a single Availability Zone, which reduces the cost by 47% compared to Amazon EFS Standard-IA, but also increases the risk of data loss in the event of an Availability Zone failure. Using Amazon EFS One Zone-IA for migrating an NFS data store would not be cost-effective, as it would incur higher access charges and require additional configuration to enable lifecycle management. It would also compromise the availability and durability of the data.


AWS Storage Gateway - Amazon Web Services

Amazon S3 File Gateway - AWS Storage Gateway

Object Lifecycle Management - Amazon Simple Storage Service

[AWS Storage Gateway Volume Gateway - AWS Storage Gateway]

[Amazon Elastic File System - Amazon Web Services]

[Using EFS storage classes - Amazon Elastic File System]

Contribute your Thoughts:

Staci
1 months ago
I'm picturing the senior devs logging into the Production account like secret agents, all stealthy-like. Option B is the spy-approved solution!
upvoted 0 times
Adolph
8 days ago
Option B: Use AWS Organizations to create a service control policy that allows the senior developers from the Development account to assume roles in the Production account.
upvoted 0 times
...
Tyisha
9 days ago
Option A: Set up cross-account roles with permissions in the Production account for the two senior developers.
upvoted 0 times
...
...
Belen
1 months ago
You know, I was tempted by Option D at first, but then I realized it would be a pain to manage all those groups and permissions. Option B is definitely the winner here.
upvoted 0 times
Kathryn
16 days ago
Option B allows for easy management of permissions and access for the senior developers in the alpha phase.
upvoted 0 times
...
...
Terry
1 months ago
Haha, I can just imagine the chaos if we gave all the developers direct access to the Production account. Option B keeps things nice and tidy.
upvoted 0 times
Kerry
16 days ago
Agreed, it's important to maintain security and control access to sensitive environments like Production.
upvoted 0 times
...
Britt
18 days ago
That sounds like a good plan. We definitely don't want all developers having direct access to the Production account.
upvoted 0 times
...
Jeff
25 days ago
Option B: Use AWS Organizations to create a service control policy that allows only the two senior developers access to the Production account during the alpha phase.
upvoted 0 times
...
...
Latonia
2 months ago
I agree, Option B seems like the best choice. Allowing developers to assume the role in the Development account is a more controlled approach than granting direct access.
upvoted 0 times
Otis
29 days ago
Agreed. It's important to have a controlled approach when granting access to sensitive environments like Production.
upvoted 0 times
...
Armanda
1 months ago
I think so too. Direct access to the Production account can be risky, especially during the alpha phase.
upvoted 0 times
...
Victor
1 months ago
Option B is definitely the way to go. It's more secure to have developers assume a role in the Development account.
upvoted 0 times
...
...
Nicholle
2 months ago
Option B is the way to go. It's the most flexible and secure solution, allowing us to manage access to the Production account from the Development account.
upvoted 0 times
Kimberely
6 days ago
It's important to have a secure solution in place for this process.
upvoted 0 times
...
Augustine
10 days ago
We can easily control who has access to the Production account from the Development account.
upvoted 0 times
...
Tamala
18 days ago
I agree, it provides the flexibility we need to manage access.
upvoted 0 times
...
Fausto
1 months ago
Option B is definitely the best choice for this scenario.
upvoted 0 times
...
...
Kimberlie
2 months ago
I'm not sure. Option C also seems like a valid solution. Creating an IAM role in the Production account could work too.
upvoted 0 times
...
Sabine
2 months ago
I agree with Bettina. Creating an IAM role in the Development account seems like the most secure way to handle access.
upvoted 0 times
...
Bettina
3 months ago
I think option B is the best solution.
upvoted 0 times
...

Save Cancel
az-700  pass4success  az-104  200-301  200-201  cissp  350-401  350-201  350-501  350-601  350-801  350-901  az-720  az-305  pl-300  

Warning: Cannot modify header information - headers already sent by (output started at /pass.php:70) in /pass.php on line 77