SOA-C02 Question 113
Select 3You are tasked with configuring Amazon S3 Cross-Region Replication (CRR) to replicate objects from a source bucket in the us-east-1 region to a destination bucket in the ap-southeast-1 region. After setting up the replication, you notice that some objects in the source bucket are not being replicated to the destination bucket. Which of the following could be the reasons for this issue?
- A
The source bucket has versioning enabled, but versioning is not enabled on the destination bucket.
- B
The IAM role used for replication does not have the necessary permissions to replicate objects.
- C
The objects in the source bucket were created before the replication rule was configured.
- D
The source bucket and destination bucket are in different AWS accounts.
- E
The destination bucket has default encryption enabled, but the source bucket does not.
Show answer and explanation
Correct answers: A, B, C
Explanation
Cross-Region Replication (CRR) requires versioning to be enabled on both the source and destination buckets. Additionally, the IAM role used for replication must have the correct permissions, and CRR only replicates objects created after the replication rules are applied. Objects created before the rule was configured are not replicated. The replication process is not hindered by default encryption settings or whether the buckets are in different AWS accounts, provided proper configurations are in place.
- A. Correct.
Correct. Cross-Region Replication requires that both the source and destination buckets have versioning enabled. If versioning is not enabled on the destination bucket, replication will fail.
- B. Correct.
Correct. The IAM role used for replication must have the appropriate permissions, such as s3:ReplicateObject and s3:ReplicateDelete, for the replication to work correctly.
- C. Correct.
Correct. Objects created in the source bucket before the replication rules were applied are not replicated retroactively. CRR applies only to objects created after the replication rule is configured.
- D. Incorrect.
Incorrect. While CRR can replicate between buckets in different AWS accounts, this is not a reason for objects failing to replicate. Proper permissions and trust relationships would need to be configured in such cases.
- E. Incorrect.
Incorrect. The presence or absence of default encryption on the source or destination bucket does not affect CRR functionality. S3 automatically handles the replication of encrypted objects.