Which solution will meet these requirements with the LEAST operational overhead?
Create a new S3 bucket that uses server-side encryption with AWS KMS multi-Region keys (SSE-KMS). Configure Cross-Region Replication (CRR). Load the data into the new S3 bucket. Use Amazon Athena to query the data.
Create a new S3 bucket that uses server-side encryption with Amazon S3 managed keys (SSE-S3). Configure Cross-Region Replication (CRR). Load the data into the new S3 bucket. Use Amazon RDS to query the data.
Configure Cross-Region Replication (CRR) on the existing S3 bucket. Use server-side encryption with Amazon S3 managed keys (SSE-S3). Use Amazon Athena to query the data.
Configure S3 Cross-Region Replication (CRR) on the existing S3 bucket. Use server-side encryption with AWS KMS multi-Region keys (SSE-KMS). Use Amazon RDS to query the data.
Explanations:
This option meets all requirements with minimal operational overhead: S3 encryption using KMS multi-Region keys, Cross-Region Replication, and Athena for SQL querying without needing additional infrastructure.
While it supports encryption and replication, RDS would add unnecessary operational overhead as it’s not serverless, unlike Athena, which is serverless.
Although it enables encryption and replication with SSE-S3 and CRR, it does not meet the encryption requirement with KMS multi-Region keys.
This option uses RDS for querying, which adds more operational overhead than Athena and does not fully leverage a serverless approach.
I reckon the answer is:
Create a new S3 bucket that uses server-side encryption with AWS KMS multi-Region keys (SSE-KMS). Configure Cross-Region Replication (CRR). Load the data into the new S3 bucket. Use Amazon Athena to query the data.