Question

A SysOps administrator manages a fleet of EC2 instances in us-east-1 backed by encrypted EBS volumes using a customer managed KMS key. The company's disaster recovery policy requires that volume backups be recoverable in us-west-2 within 4 hours if the primary Region becomes unavailable. Currently, automated EBS snapshots are created daily by a Data Lifecycle Manager (DLM) policy, but they exist only in us-east-1. What is the MOST appropriate way to meet the DR requirement?

Accepted Answer

Modify the DLM lifecycle policy to add a cross-Region copy action to us-west-2 and specify a KMS key in us-west-2 for re-encryption of the copied snapshots.

Answer

Enable EBS fast snapshot restore (FSR) on the existing snapshots in us-east-1 so volumes can be restored quickly during a failover.

Answer

Create an AMI from each instance and rely on the fact that AMIs are automatically replicated to all Regions in the account.

Answer

Change the EBS volumes to Multi-Attach io2 volumes so they can be attached to instances in us-west-2 during a disaster.