Which solution will meet these requirements?

By:
In: SAP-C02
Tagged:
With: 1 Comment
A company is migrating an application from on-premises infrastructure to the AWS Cloud.During migration design meetings, the company expressed concerns about the availability and recovery options for its legacy Windows file server.The file server contains sensitive business-critical data that cannot be recreated in the event of data corruption or data loss.According to compliance requirements, the data must not travel across the public internet.The company wants to move to AWS managed services where possible.The company decides to store the data in an Amazon FSx for Windows File Server file system.A solutions architect must design a solution that copies the data to another AWS Region for disaster recovery (DR) purposes.

Which solution will meet these requirements?

Create a destination Amazon S3 bucket in the DR Region. Establish connectivity between the FSx for Windows File Server file system in the primary Region and the S3 bucket in the DR Region by using Amazon FSx File Gateway. Configure the S3 bucket as a continuous backup source in FSx File Gateway.

Create an FSx for Windows File Server file system in the DR Region. Establish connectivity between the VPC the primary Region and the VPC in the DR Region by using AWS Site-to-Site VPN. Configure AWS DataSync to communicate by using VPN endpoints.

Create an FSx for Windows File Server file system in the DR Region. Establish connectivity between the VPC in the primary Region and the VPC in the DR Region by using VPC peering. Configure AWS DataSync to communicate by using interface VPC endpoints with AWS PrivateLink.

Create an FSx for Windows File Server file system in the DR Region. Establish connectivity between the VPC in the primary Region and the VPC in the DR Region by using AWS Transit Gateway in each Region. Use AWS Transfer Family to copy files between the FSx for Windows File Server file system in the primary Region and the FSx for Windows File Server file system in the DR Region over the private AWS backbone network.

Explanations:

Amazon FSx File Gateway cannot be used for continuous backup between FSx for Windows File Server and Amazon S3. Additionally, S3 is not a managed Windows file system service and does not meet the requirement of using AWS managed services for the file system.

AWS Site-to-Site VPN is not the optimal solution for transferring large amounts of data, and it does not provide the necessary managed file system capabilities. DataSync can work with VPN but requires a more secure and scalable solution like Direct Connect or VPC peering.

Creating a secondary FSx for Windows File Server in the DR Region and using AWS DataSync with VPC peering and interface VPC endpoints is a suitable solution. DataSync can securely transfer data between the two FSx file systems over private AWS connectivity, complying with the requirement of no public internet exposure.

AWS Transfer Family is designed for file transfers to/from SFTP, FTP, or FTPS, not for replicating FSx for Windows File Server data. Using a Transit Gateway is a viable solution, but AWS Transfer Family is not appropriate for this scenario.

2025-10-03

1 Comment

  1. Patrick
    Author

    It seems to me that the answer is:
    Create an FSx for Windows File Server file system in the DR Region. Establish connectivity between the VPC in the primary Region and the VPC in the DR Region by using VPC peering. Configure AWS DataSync to communicate by using interface VPC endpoints with AWS PrivateLink.

Leave a Reply

Your email address will not be published. Required fields are marked *

four − three =