Which solution will meet these requirements?

By:
In: SAP-C01
Tagged:
With: 1 Comment
A company is migrating an application from on-premises infrastructure to the AWS Cloud.During migration design meetings, the company expressed concerns about the availability and recovery options for its legacy Windows file server.The file server contains sensitive business-critical data that cannot be recreated in the event of data corruption or data loss.According to compliance requirements, the data must not travel across the public internet.The company wants to move to AWS managed services where possible.The company decides to store the data in an Amazon FSx for Windows File Server file system.A solutions architect must design a solution that copies the data to another AWS Region for disaster recovery (DR) purposes.

Which solution will meet these requirements?

Create a destination Amazon S3 bucket in the DR Region. Establish connectivity between the FSx for Windows File Server file system in the primary Region and the S3 bucket in the DR Region by using Amazon FSx File Gateway. Configure the S3 bucket as a continuous backup source in FSx File Gateway.

Create an FSx for Windows File Server file system in the DR Region. Establish connectivity between the VPC in the primary Region and the VPC in the DR Region by using AWS Site-to-Site VPN. Configure AWS DataSync to communicate by using VPN endpoints.

Create an FSx for Windows File Server file system in the DR Region. Establish connectivity between the VPC in the primary Region and the VPC in the DR Region by using VPC peering. Configure AWS DataSync to communicate by using interface VPC endpoints with AWS PrivateLink.

Create an FSx for Windows File Server file system in the DR Region Establish connectivity between the VPC in the primary Region and the VPC in the DR Region by using AWS Transit Gateway in each Region. Use AWS Transfer Family to copy files between the FSx for Windows File Server file system in the primary Region and the FSx for Windows File Server file system in the DR Region over the private AWS backbone network.

Explanations:

Amazon FSx File Gateway does not support continuous backup to Amazon S3 and cannot be used for cross-region disaster recovery of FSx for Windows File Server. Additionally, it introduces a dependency on the public internet for S3 communication, which violates the compliance requirement.

While AWS Site-to-Site VPN provides private connectivity, it is not the best solution for cross-region data replication with FSx for Windows File Server. VPN connections may introduce additional complexity and limitations in performance and availability for large-scale data transfer.

AWS DataSync can be used with VPC peering and interface VPC endpoints to securely copy data between FSx for Windows File Server instances in different regions over the AWS private backbone network, meeting compliance and availability requirements.

While AWS Transit Gateway can provide a central hub for inter-region connectivity, AWS Transfer Family is designed for SFTP, FTPS, and FTP file transfers, not for syncing FSx for Windows File Server data. This option does not directly support data replication for FSx.

2025-10-11

1 Comment

  1. Martha
    Author

    I draft that the answer is:
    Create an FSx for Windows File Server file system in the DR Region. Establish connectivity between the VPC in the primary Region and the VPC in the DR Region by using VPC peering. Configure AWS DataSync to communicate by using interface VPC endpoints with AWS PrivateLink.

Leave a Reply

Your email address will not be published. Required fields are marked *

seventeen + 16 =