Exam AWS Certified DevOps Engineer - Professional DOP-C02 topic 1 question 36 discussion

S3 cross-Region replication (CRR) automatically replicates data between buckets across different AWS Regions. To enable CRR, you need to add a replication configuration to your source bucket that specifies the destination bucket, the IAM role, and the encryption type (optional). You also need to grant permissions to the IAM role to perform replication actions on both the source and destination buckets. Additionally, you can choose the destination storage class and enable additional replication options such as S3 Replication Time Control (S3 RTC) or S3 Batch Replication.

Tricky question because they are trying to get one to confuse the "enable" replicaton "role"/policy ("rule") in source account with the "allow" replicaton role/"policy" in target account. These references helped me work up some summary steps: Steps to configure S3 replication between different accounts 1. Create source and destination buckets in different accounts and regions (acctA, acctB) 2. Enable versioning on the buckets (acctA, acctB) 3. Create IAM role and attach a policy granting S3 permission to replicate objects (acctA) 4. Add the replication configuration to source bucket (acctA) 5. Add bucket "policy on the destination bucket to allow" objects replication (acctB)(req. 2nd role) https://docs.aws.amazon.com/AmazonS3/latest/userguide/replication-walkthrough1.html#enable-replication https://docs.aws.amazon.com/AmazonS3/latest/userguide/replication-walkthrough-2.html

ADF is correct: this task is done by S3 itself A: Create role in the source to allow S3 access permission D: add policy to allow repication in the target E: enable replication in the source

ADE make sense.

ADE make sense.

Confirmed

ADE confirmed!

ADE https://docs.aws.amazon.com/AmazonS3/latest/userguide/replication-walkthrough-2.html