DEA-C01 Question 548
Select 3Your company operates in a region with strict data sovereignty laws that mandate customer data must not leave the country of origin. You are tasked with setting up an analytics pipeline on AWS that processes sensitive customer data. Which combination of AWS services and configurations ensures compliance with these regulations?
- A
Use Amazon S3 with a bucket configured to store data in the required AWS Region and apply a bucket policy to restrict access to the region.
- B
Use AWS Lambda functions with a VPC endpoint in the required AWS Region to process the data locally.
- C
Use Amazon RDS with Multi-AZ replication across AWS Regions to ensure high availability and compliance.
- D
Use AWS DataSync to transfer data between on-premises and Amazon S3 within the same country.
- E
Enable S3 Cross-Region Replication to store a copy of the data in another region as a backup.
Show answer and explanation
Correct answers: A, B, D
Explanation
To ensure compliance with data sovereignty laws, it is essential to keep all sensitive data and processing within the geographic boundaries of the required region. Using Amazon S3 with strict region-based storage policies, AWS Lambda with VPC endpoints, and AWS DataSync for secure local data transfer are effective solutions. Options like cross-region replication and multi-region configurations violate the data sovereignty requirement and should be avoided.
- A. Correct.
Correct: Configuring Amazon S3 to store data in the required AWS Region and applying a bucket policy ensures that data does not leave the region, aligning with the data sovereignty laws.
- B. Correct.
Correct: Using AWS Lambda with a VPC endpoint in the required AWS Region ensures that data processing occurs locally without transferring data outside the region.
- C. Incorrect.
Incorrect: Multi-AZ replication across AWS Regions would conflict with data sovereignty laws, as it involves data leaving the country of origin.
- D. Correct.
Correct: AWS DataSync can be used to securely transfer data between on-premises and Amazon S3 within the same country, which complies with the regulations.
- E. Incorrect.
Incorrect: Enabling S3 Cross-Region Replication explicitly moves data to another region, violating data sovereignty requirements.