DEA-C01 Question 547
Select 3You are designing a data pipeline for a multinational organization that must comply with data sovereignty regulations in multiple countries. The data collected in each country cannot leave its geographical boundaries. Which combination of AWS services and configurations ensures compliance with these requirements?
- A
Use AWS Regions in each country to store and process data locally.
- B
Enable Amazon S3 Cross-Region Replication to replicate data across countries for redundancy.
- C
Leverage AWS Organizations with Service Control Policies (SCPs) to restrict resource creation to specific Regions.
- D
Use AWS Outposts to store and process data on-premises if certain regions lack an AWS data center.
- E
Enable Amazon CloudFront to serve data globally with low latency while keeping the source data in a single Region.
Show answer and explanation
Correct answers: A, C, D
Explanation
To comply with data sovereignty, data must remain within the geographical boundaries of the countries where it is collected. Using AWS Regions ensures local storage and processing. AWS Organizations with SCPs enforce controls to prevent accidental data transfer across Regions. When AWS data centers are unavailable in a country, AWS Outposts provide an alternative on-premises solution. Cross-Region Replication and CloudFront are not appropriate, as they could violate data sovereignty regulations by allowing data to leave the country.
- A. Correct.
This is correct. Using AWS Regions within the respective countries ensures data complies with sovereignty requirements by staying within the geographical boundaries.
- B. Incorrect.
This is incorrect. Cross-Region Replication moves data across geographical boundaries, violating data sovereignty regulations.
- C. Correct.
This is correct. AWS Organizations with SCPs can enforce that resources and data remain in specific Regions, ensuring compliance with data sovereignty laws.
- D. Correct.
This is correct. AWS Outposts allows for storing and processing data on-premises when an AWS data center is unavailable in a specific country, meeting data sovereignty requirements.
- E. Incorrect.
This is incorrect. Amazon CloudFront serves data globally, but it does not ensure that the source data remains within a specific Region, violating data sovereignty.