Which combination of steps should a solutions architect take to meet these requirements?
(Choose two.)
Take a manual snapshot of the DB cluster.
Create a lifecycle policy for the automated backups.
Configure automated backup retention for 5 years.
Configure an Amazon CloudWatch Logs export for the DB cluster.
Use AWS Backup to take the backups and to keep the backups for 5 years.
Explanations:
Taking a manual snapshot of the DB cluster does not help with managing retention for 5 years or ensuring indefinite storage of audit logs. It is not a complete solution for the data retention requirement.
Lifecycle policies are typically used for Amazon S3 data management, not for Amazon Aurora backups. Aurora’s automated backups cannot be managed via a lifecycle policy.
Configuring automated backup retention for 5 years is not possible because Aurora only supports automated backup retention for up to 35 days. It doesn’t support a 5-year retention period.
Amazon CloudWatch Logs can be used to export audit logs for Aurora PostgreSQL. This meets the requirement of indefinitely keeping audit logs of actions performed in the database.
Using AWS Backup allows for the management of backup retention, including the ability to keep backups for a 5-year period. It ensures compliance with the data retention requirement.
I organize that the answer is:
Configure an Amazon CloudWatch Logs export for the DB cluster.
I believe the answer is:
Configure an Amazon CloudWatch Logs export for the DB cluster.