Exam AWS Certified Solutions Architect - Professional SAP-C02 topic 1 question 20 discussion

A - Glacier Deep Archive can't be used for web hosting, regardless if the company says retrieval time is no concern.

A is correct. HA is not required here. D use Glacier deep archive that need hours to access that will cause time out for web

keywords: 'Archive documents, low requests, low availability and speed, LOWEST cost' = S3 Glacier Deep Archive

only A & D make sense, and since website hosting is also a requirement, I'll go with A.

The requirements are to store a large number of archived documents that are not publicly accessible, and make them available to employees through a corporate intranet. As the number of requests is low and speed of retrieval is not a concern, we can use the low-cost S3 One Zone-Infrequent Access (S3 One Zone-IA) storage class. We can configure the S3 bucket for website hosting and create an S3 interface endpoint to allow access to the documents only through the corporate intranet. This solution is the lowest cost as it eliminates the need to launch and manage EC2 instances. Option B and C involve launching an EC2 instance which increases the operational overhead and is more expensive than using S3. Also, EFS One Zone-IA storage class is not recommended for storing large files. Option D involves using the S3 Glacier Deep Archive storage class which is intended for long-term archival storage of data and not suitable for retrieving data frequently.

https://docs.aws.amazon.com/AmazonS3/latest/userguide/storage-class-intro.html Store large number of archived docs, and available through corp intranet. Copies of data held on physical media elsewhere (could be re-created). Requests low (but it doesn't say RARE so think monthly/quarterly). "AVAILABILITY" and speed of retrieval are not concerns. It is A, yes Glacier is "cheaper", but I have to leave the archives for at least 180 days, would be available on corp intranet and it is more cost-effective if I want to migrate the data to Glacier if I monitor use and see it is "rarely" touched and know I have to hold it due to regulatory for at minimal 180 days.

While D is most probably the cheapest solution. When you try to download an object in deep archive you get a warning that it is not possible. You need to retrieve it: got to actions and restore which will need at least 12 hours for *deep* archive. Only after that you can access the document. The answer D says enable webhosting: thats afaik not going to work but users will end up in above mentioned warning. Therefore we need to go for A which is not as cheap but users can access the documents.

Given the requirements and the need for the lowest cost solution, the best option would be: A. Create an Amazon S3 bucket. Configure the S3 bucket to use the S3 One Zone-Infrequent Access (S3 One Zone-IA) storage class as default. Configure the S3 bucket for website hosting. Create an S3 interface endpoint. Configure the S3 bucket to allow access only through that endpoint. Options B and C involve launching EC2 instances which would add unnecessary complexity and cost since the company's priority is to minimize costs. Additionally, option D involves using the S3 Glacier Deep Archive storage class which is intended for long-term archival data and has longer retrieval times, making it less suitable for the given requirements.

Answer A. B and C are not relevant. D is close to create confusion but can't be used as an option for 2 reasons: 1. You can't create a S3 bucket with Glacier deep archive as a default storage class. Need lifecycle transition from any other S3 classes. 2. S3 Glacier deep archive can't be used for website hosting.

Option A - This option will work and S3 One Zone is a cheap storage solution for a large number of documents Option B - This option might not work: Nothing is said in the question about whether the Client VPN is connecting to a private subnet. Moreover, EFS might not be a cheap storage solution for a large number of documents Option C - This option might not work: Nothing is said in the question about whether the Client VPN is connecting to a private subnet. Moreover, EBS Cold HDD might not be a cheap storage solution for a large number of documents Option D - This option will not work: S3 Deep Glacier Vaults cannot be configured for static hosting. You would need to write an application for accessing the archives.

pay attention to "copies of data that is held on physical media elsewhere", this is hint for one zone. Using Glacier is possible in theory, but won't work out of box. Need to develop a whole new application to submit unarchive request when user request a file, wait for up to 48 hour, create the s3 link, notify the user and ask user to come back to view the file. This is ANOTHER application

For me is A. I'm not sure that S3 Glacier Deep Archive can be used as website. Also more than 12 hours to retrieve is so much for documental systems (also if is not a concern the speed up). Going with A

Objects in Glacier Deep Archive needs to be 'restored'. A click on simple static website will not make AWS API call to restore the object and make it available.

Option D: 2 major points for the company. 1. Availability and speed of retrieval are NOT concerns of the company. 2. Meets these requirements at the LOWEST cost. Only S3 Glacier Deep Archive gives the company those requirement. The questions doesn't state how fast the employees need to access the files but the company does, see point 1. S3 Glacier Deep Archive is the lowest-cost storage option in AWS. Standard-IA and S3 One Zone-IA objects are available for millisecond access https://docs.aws.amazon.com/AmazonS3/latest/userguide/storage-class-intro.html

The answer is A. D is wrong because the data stored on Glacier Deep Archive can't be accessed directly without initiating a retrieval request to restore the data to either S3 Standard or S3 Standard-IA first. Needless to say, use it as static web site.

A - Even Deep Glacier is lowest cost and company says retrieval time is no concern, Deep Glacier cannot be used for web hosting.

A. Create an Amazon S3 bucket. Configure the S3 bucket to use the S3 One Zone-Infrequent Access (S3 One Zone-IA) storage class as default. Configure the S3 bucket for website hosting. Create an S3 interface endpoint. Configure the S3 bucket to allow access only through that endpoint.