What should a solutions architect do to satisfy the security requirements?
Enable IAM database authentication on the database.
Provide self-signed certificates. Use the certificates in all connections to the RDS instance.
Take a snapshot of the RDS instance. Restore the snapshot to a new instance with encryption enabled.
Download AWS-provided root certificates. Provide the certificates in all connections to the RDS instance.
Explanations:
Moving the original images to S3 Glacier is not ideal because Glacier is designed for long-term archival storage with retrieval times ranging from minutes to hours. Since the original images may need to be accessed for collage recreation, they should be stored in a more accessible class. S3 Standard-IA is suitable for collages that are infrequently accessed.
Storing original images in S3 Glacier is not appropriate due to potential long retrieval times. While S3 One Zone-IA could work for the collages since they are accessed infrequently and can tolerate some loss, it’s not optimal for original images that may need to be restored quickly.
S3 Standard-IA is a better fit for infrequently accessed data, but it is not cost-effective for original images that may rarely need to be accessed. Storing collages in S3 One Zone-IA is reasonable, but using Standard-IA for originals does not provide the best cost savings.
Moving original images to S3 One Zone-IA optimizes for cost while still allowing for reasonable access time, as they are infrequently accessed. Storing collages in S3 Standard-IA allows for easy access to collages when needed without incurring higher storage costs. This option balances cost and access requirements effectively.