CloudGuild · Blog · Cheat sheets · Lessons · Certifications
Preventing Data Loss in Amazon S3: A Question Walkthrough
Learn how to choose the best practices for data resilience in Amazon S3. We analyze a key exam question to improve your SAA-C03 prep.
Your organization wants to ensure that its data stored in Amazon S3 is resilient to both accidental deletions and malicious attacks. What is the best practice to implement?
The question
- A: Enable versioning on the S3 bucket.
- B: Use AWS Backup to back up the S3 data.
- C: Implement server-side encryption.
- D: Configure S3 lifecycle policies.
Think before you scroll
This question tests your understanding of data protection strategies in Amazon S3. Accidental deletions and malicious attacks require different responses. Weigh the options carefully to identify which practices directly address these threats.
The answer
The correct options are A and B. Enabling versioning allows recovery from accidental deletions. Using AWS Backup provides an additional layer of data protection against malicious attacks. Both practices enhance data resilience.
Why the other options lose
- C: Implement server-side encryption.
While encryption protects data confidentiality, it does not prevent data loss due to accidental deletions or malicious attacks. It is important for security but not sufficient for resilience against these specific threats. - D: Configure S3 lifecycle policies.
Lifecycle policies manage data storage efficiently by transitioning or deleting objects based on specified rules. However, they do not provide protection against accidental deletions or attacks. They are useful for cost management but irrelevant to the resilience requirement in this context.
The concept behind it
To protect data stored in Amazon S3, combine versioning and backup. Versioning helps recover from user errors, while AWS Backup safeguards against malicious actions. Understanding how these features work together is crucial for resilience.
Exam trap to remember
Remember: Versioning and backups are essential for data resilience. Security measures alone do not prevent loss.