CloudGuild · Blog · Cheat sheets · Lessons · Certifications
Understanding AWS SAA-C03: Encryption and Cost Management Decision
Learn how to tackle AWS SAA-C03 exam questions about data encryption and cost management with this detailed walkthrough.
Candidates often stumble on questions that combine compliance requirements with cost management. Balancing these two aspects can lead to confusion, especially under exam pressure.
The question
A financial organization is concerned about compliance and cost management. They want to ensure their data is encrypted at rest and minimize storage costs. Which AWS service combination should they choose?
- A. Amazon S3 with Server-Side Encryption (SSE) and S3 Standard Storage
- B. Amazon S3 with Server-Side Encryption (SSE) and S3 Glacier
- C. Amazon RDS with Encryption and Provisioned IOPS
- D. Amazon EBS with Encryption and General Purpose SSD
Think before you scroll
Consider the requirements: compliance for encryption and the need to minimize costs. Look for the AWS service that provides both encryption at rest and the most cost-effective storage solution.
The answer
The correct option is B. Amazon S3 with Server-Side Encryption (SSE) and S3 Glacier. This combination meets compliance needs through encryption and is designed for cost-effective long-term storage.
Why the other options lose
- A. Amazon S3 with Server-Side Encryption (SSE) and S3 Standard Storage: While this option provides encryption, S3 Standard is not cost-effective for long-term storage. It is suitable for frequently accessed data but does not align with the goal of minimizing costs.
- C. Amazon RDS with Encryption and Provisioned IOPS: This option involves higher storage costs due to the nature of RDS and Provisioned IOPS. It is more suited for transactional databases rather than cost-effective compliance storage.
- D. Amazon EBS with Encryption and General Purpose SSD: Similar to RDS, EBS with General Purpose SSD is not the best option for long-term storage needs. It incurs higher costs and is not designed for archiving data at a low price point.
The concept behind it
Understanding the different AWS storage options is crucial. S3 Glacier is specifically optimized for archiving data at a low cost. When combining encryption and storage needs, always assess both cost and compliance requirements. The right choice often hinges on the specific use case for data accessibility and retention.
Exam trap to remember
When faced with compliance and cost management questions, remember: Glacier = cost-effective compliance storage. Prioritize solutions that align with both encryption needs and budget constraints.