Question 670
An architecture review recommends this solution: Configure S3 replication rules with correct versioning and KMS permissions for destination encrypted objects. The motivating situation is: Two Regions must retain independently encrypted object replicas to meet recovery requirements during a source Region failure. Which principle would a reviewer use to defend this design?
Explanation
Correct Answer
This principle explains why the prescribed control is appropriate for the described requirement. The matching design action is: Configure S3 replication rules with correct versioning and KMS permissions for destination encrypted objects. The expected supporting evidence is: Eligible new source objects replicate with appropriate destination encryption and remain readable during source outage.
Incorrect Answers
Every component must be rebuilt from scratch after failure, despite a tighter RTO. The stated evidence instead indicates: The destination bucket is present but replication cannot use the destination KMS key.
A single active Region was incorrectly advertised as having near-zero recovery time. The stated evidence instead indicates: The destination bucket is present but replication cannot use the destination KMS key.
Every read request traverses the backing DynamoDB service despite highly reusable cacheable data. The stated evidence instead indicates: The destination bucket is present but replication cannot use the destination KMS key.