A company wants a serverless solution to analyze existing and new data (using SQL). Data is stored in an Amazon S3 bucket, must be encrypted, and must be replicated to a different AWS Region. Which solution meets these requirements with the LEAST operational overhead?
Choose an answer
Tap an option to check your answer.
Correct answer: Load the data into the existing S3 bucket. Use S3 Cross-Region Replication (CRR) to replicate encrypted objects to an S3 bucket in another Region. Use server-side encryption with Amazon S3 managed encryption keys (SSE-S3). Use Amazon Athena to query the data..
Why this is the answer
The correct solution leverages Amazon S3 for data storage, S3 Cross-Region Replication (CRR) for replication, and Amazon Athena for serverless SQL querying, which directly addresses the requirements for analyzing existing and new data with SQL in a serverless manner. Using SSE-S3 for encryption provides a managed encryption solution with minimal operational overhead. Loading data into the existing S3 bucket avoids unnecessary data migration. Amazon RDS is a relational database service, not a serverless query engine for S3 data, and thus introduces more operational overhead and is not suitable for direct S3 analysis. While SSE-KMS with multi-Region keys offers strong encryption, SSE-S3 is simpler and meets the encryption requirement with less management overhead, making it the "least operational overhead" choice.