SAA-C03 Question 496
Select 2A company is required to retain application logs for 5 years to meet compliance requirements. The logs are currently stored in an Amazon S3 bucket. The company wants to minimize costs while ensuring the logs are retained for the required duration and are protected from accidental deletion. What is the MOST cost-effective way to achieve this?
- A
Use S3 Intelligent-Tiering for the logs and configure a Lifecycle policy to delete logs older than 5 years.
- B
Move the logs to S3 Glacier Deep Archive and configure a Lifecycle policy to delete logs older than 5 years.
- C
Enable S3 Object Lock in Compliance mode for the S3 bucket and configure a retention period of 5 years.
- D
Use S3 Standard storage class and enable versioning to protect the logs from accidental deletion.
- E
Configure a Lifecycle policy to move logs to S3 Standard-IA after 30 days and then to S3 Glacier Deep Archive after 90 days.
Show answer and explanation
Correct answers: B, C
Explanation
For long-term retention of logs at the lowest cost, S3 Glacier Deep Archive is the optimal storage class. Using a Lifecycle policy automates data deletion after 5 years, ensuring compliance with retention policies. Additionally, enabling S3 Object Lock in Compliance mode ensures that the logs cannot be accidentally deleted during the retention period, providing the required protection.
- A. Incorrect.
S3 Intelligent-Tiering is designed to optimize storage costs for objects with unknown access patterns, but it is not the most cost-effective option for long-term archival storage like logs. Additionally, it does not inherently protect against accidental deletion.
- B. Correct.
S3 Glacier Deep Archive is the most cost-effective storage class for long-term data retention, and combining it with a Lifecycle policy ensures logs are automatically deleted after 5 years. This meets both cost and retention requirements.
- C. Correct.
Enabling S3 Object Lock in Compliance mode ensures the logs cannot be deleted or modified during the retention period, which protects the data from accidental deletion and meets compliance requirements.
- D. Incorrect.
While enabling versioning can provide protection against accidental deletion, it does not meet the requirement to minimize costs and is not the best solution for long-term archival storage.
- E. Incorrect.
This option partially addresses cost optimization by transitioning data to lower-cost storage classes, but it does not inherently protect data from accidental deletion or meet compliance requirements.