SAP-C02 · Question #557
A company is serving files to its customers through an SFTP server that is accessible over the internet. The SFTP server is running on a single Amazon EC2 instance with an Elastic IP address…
The correct answer is B. Disassociate the Elastic IP address from the EC2 instance. Create an Amazon S3 bucket to be. To improve availability and simplify management of an SFTP server without changing how customers connect, migrate the SFTP functionality to AWS Transfer Family, utilizing S3 for storage and reusing the existing Elastic IP address.
Question
A company is serving files to its customers through an SFTP server that is accessible over the internet. The SFTP server is running on a single Amazon EC2 instance with an Elastic IP address attached. Customers connect to the SFTP server through its Elastic IP address and use SSH for authentication. The EC2 instance also has an attached security group that allows access from all customer IP addresses. A solutions architect must implement a solution to improve availability, minimize the complexity of infrastructure management, and minimize the disruption to customers who access files. The solution must not change the way customers connect. Which solution will meet these requirements?
Options
- ADisassociate the Elastic IP address from the EC2 instance. Create an Amazon S3 bucket to be
- BDisassociate the Elastic IP address from the EC2 instance. Create an Amazon S3 bucket to be
- CDisassociate the Elastic IP address from the EC2 instance. Create a new Amazon Elastic File
- DDisassociate the Elastic IP address from the EC2 instance. Create a multi-attach Amazon Elastic
How the community answered
(26 responses)- A12% (3)
- B77% (20)
- C4% (1)
- D8% (2)
Why each option
To improve availability and simplify management of an SFTP server without changing how customers connect, migrate the SFTP functionality to AWS Transfer Family, utilizing S3 for storage and reusing the existing Elastic IP address.
While using AWS Transfer Family and S3 is correct, creating a new Route 53 A record is unnecessary if the goal is not to change how customers connect and to reuse the existing Elastic IP.
AWS Transfer Family provides a fully managed SFTP service that is highly available and scalable, removing the operational overhead of managing EC2 instances. By creating an SFTP endpoint using the Transfer Family and associating the existing Elastic IP address with it, customer connection methods remain unchanged, minimizing disruption. Using Amazon S3 as the backend storage for files further enhances durability and scalability while simplifying infrastructure management.
Amazon Elastic File System (EFS) is a network file system and does not provide the managed SFTP endpoint functionality directly, nor does it inherently offer the same availability or management simplicity for SFTP access as AWS Transfer Family.
Multi-attach Amazon EBS volumes are block storage attached to multiple EC2 instances, which doesn't directly solve the managed SFTP problem, nor does it inherently simplify management or improve availability for an SFTP service without significant custom engineering.
Concept tested: Migrating SFTP to AWS Transfer Family for managed service
Source: https://aws.amazon.com/aws-transfer-family/
Community Discussion
No community discussion yet for this question.