Exam AWS Certified Solutions Architect - Associate SAA-C03 topic 1 question 482 discussion

AWS DataSync is a fully managed data transfer service that simplifies and automates the process of moving data between on-premises storage and Amazon S3. It provides secure and efficient data transfer with built-in encryption, ensuring that the data is encrypted in transit. By using AWS DataSync, the company can easily migrate the 100 GB of historical data from their on-premises location to an S3 bucket. DataSync will handle the encryption of data in transit and ensure secure transfer.

Using DataSync, the company can easily migrate the 100 GB of historical data to an S3 bucket. DataSync will handle the encryption of data in transit, so the company does not need to set up a VPN or worry about managing encryption keys. Option A, using the s3 sync command in the AWS CLI to move the data directly to an S3 bucket, would require more operational overhead as the company would need to manage the encryption of data in transit themselves. Option D, setting up an IPsec VPN from the on-premises location to AWS, would also require more operational overhead and would be overkill for this scenario. Option C, using AWS Snowball, could work but would require more time and resources to order and set up the physical device.

Why would u u se the CLI

Assertions: - needs to encrypt the data in transit to the S3 bucket. - The company will store new data directly in Amazon S3. Requirements: - with the LEAST operational overhead Even Though options A and B could do the job, option A requires VM maintenance because it is not a once-off migration (The company will store new data directly in Amazon S3) NB: According to me, we must stuck to the question and avoid to interpret

A - one single command, uses encryption automatically B - Must install, configure and eventually decommission DataSync C - Overkill D - No need for VPN

By default, all data transmitted from the client computer running the AWS CLI and AWS service endpoints is encrypted by sending everything through a HTTPS/TLS connection. You don't need to do anything to enable the use of HTTPS/TLS. It is always enabled unless you explicitly disable it for an individual command by using the --no-verify-ssl command line option. This is simpler compared to datasync, which will cost operational overhead to configure.

storage data (including metadata) is encrypted in transit, but how it's encrypted throughout the transfer depends on your source and destination locations.

B is correct to migrate A is incorrect because is it only used to upload minor files (about a few GB) to AWS. 100 GB is not appropriate.

Use AWS DataSync to migrate the data from the on-premises location to an S3 bucket

B is a good option but as the volume is not large and the speed is not bad, A requires less operational overhead

Answer A and B both are correct and with least operational overhead. But since the question says from an "On-premise Location" hence I would go with DataSync.

AWS DataSync is a secure, online service that automates and accelerates moving data between on premises and AWS Storage services.

Why not A? s3 is already encrypted in transit by TLS. We need to have the LEAST operational overhead and DataSync implies the installation of Agent whereas AWS CLI is easier to use.

https://docs.aws.amazon.com/cli/latest/userguide/cli-services-s3-commands.html

Answer - A Use the s3 sync command in the AWS CLI to move the data directly to an S3 bucket.