A company stores data in an Amazon Aurora PostgreSQL DB cluster. The company must retain all data for 5 years and then delete it, while audit logs of database actions must be kept indefinitely. The cluster already has automated backups enabled. Which combination of steps should a solutions architect take? (Choose two.)
Choose an answer
Tap an option to check your answer.
Correct answer: Configure an Amazon CloudWatch Logs export for the DB cluster., Use AWS Backup to take the backups and to keep the backups for 5 years..
Why this is the answer
The company needs to retain data for 5 years and audit logs indefinitely. "Use AWS Backup to take the backups and to keep the backups for 5 years" is correct because AWS Backup allows centralized management of backups and can enforce a 5-year retention policy for the Aurora PostgreSQL DB cluster data, meeting the data retention requirement. "Configure an Amazon CloudWatch Logs export for the DB cluster" is correct because Aurora PostgreSQL can publish audit logs to CloudWatch Logs. From CloudWatch Logs, these logs can be exported to Amazon S3 for indefinite retention, satisfying the audit log requirement. "Configure automated backup retention for 5 years" is incorrect because Aurora automated backups have a maximum retention period of 35 days, which is insufficient for a 5-year requirement. "Take a manual snapshot of the DB cluster" is incorrect because while manual snapshots can be retained indefinitely, this is a manual process and does not scale well for ongoing backup requirements or integrate with a centralized backup strategy. "Create a lifecycle policy for the automated backups" is incorrect because automated backups are managed by Aurora and do not directly support S3-like lifecycle policies for long-term retention beyond the 35-day limit.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed