Centralized Log Aggregation with S3 Same-Region Replication

SAA-C03 By islever Editorial Last updated

Short answer

B Use S3 Same-Region Replication to replicate logs from the S3 buckets to another S3 bucket in us-west-2.

Question

A company has multiple AWS accounts with applications deployed in the us-west-2 Region. Application logs are stored within Amazon S3 buckets in each account. The company wants to build a centralized log analysis solution that uses a single S3 bucket. Logs must not leave us-west-2, and the company wants to incur minimal operational overhead. Which solution meets these requirements and is MOST cost-effective?
  1. Create an S3 Lifecycle policy that copies the objects from one of the application S3 buckets to the centralized S3 bucket.
  2. Use S3 Same-Region Replication to replicate logs from the S3 buckets to another S3 bucket in us-west-2. Use this S3 bucket for log analysis. Correct Answer
  3. Write a script that uses the PutObject API operation every day to copy the entire contents of the buckets to another S3 bucket in us-west-2. Use this S3 bucket for log analysis.
  4. Write AWS Lambda functions in these accounts that are triggered every time logs are delivered to the S3 buckets (s3:ObjectCreated:* event). Copy the logs to another S3 bucket in us-west-2. Use this S3 bucket for log analysis.

Key Takeaways

The exam tests the ability to select a managed service for cross-account data aggregation that minimizes operational overhead compared to custom scripts or Lambda functions.

This question addresses designing a cost-effective, centralized log storage solution using Amazon S3 Same-Region Replication to aggregate logs across multiple AWS accounts while keeping data within the us-west-2 region.

Common mistake: Candidates often choose Lambda-based solutions (Option D) thinking they offer better control or real-time capabilities, failing to recognize that 'minimal operational overhead' favors fully managed services like S3 Replication over code-maintenance tasks.

Expert Analysis

Why the Answer Is Correct

S3 Same-Region Replication (SRR) is the ideal solution for aggregating logs from multiple source buckets into a single destination bucket within the same AWS Region. It automatically replicates new objects as they are created, requiring zero code maintenance and minimal operational overhead. Since the requirement specifies that logs must not leave us-west-2, SRR satisfies this constraint natively without complex VPC endpoints or cross-region configurations.

Why the Other Options Are Wrong

Option A is incorrect because S3 Lifecycle policies are designed for transitioning data between storage classes (e.g., Standard to Glacier) or expiring objects, not for copying data between different buckets or accounts. Option C involves writing and maintaining a daily script, which introduces significant operational overhead and latency compared to real-time replication. Option D uses Lambda functions triggered by events; while possible, it requires managing function code, permissions, error handling, and scaling, violating the 'minimal operational overhead' requirement.

Community Comment Notes

Community consensus strongly supports Option B, citing it as the standard use case for log aggregation. As user BillaRanga noted, the main use case for SRR includes 'log aggregation, live replication between production and test accounts'. Users also correctly identified that Lifecycle policies (Option A) are for storage class transitions, not inter-bucket copying. The vote distribution reflects high confidence in this answer due to its alignment with best practices for managed infrastructure.

Official Reference

https://docs.aws.amazon.com/AmazonS3/latest/userguide/replication.html

This link opens the official vendor documentation in a new tab.

Exam Strategy

When asked for 'minimal operational overhead', prioritize fully managed AWS services over custom code (Lambda/scripts). Look for native features that handle automation, such as S3 Replication, rather than building integration layers yourself.

Frequently Asked Questions

Why can't I use S3 Lifecycle Policy to copy logs?

Lifecycle policies manage storage class transitions and expiration within a single bucket, not copying objects between different buckets or accounts.

Is Lambda less expensive than S3 Replication?

While compute costs might be low, Lambda adds significant operational overhead for maintenance, debugging, and permission management, violating the 'minimal overhead' requirement.

More SAA-C03 FAQ →

Community Votes

B
100%

100% of anonymous learners picked answer B. Votes are pick records left by other test-takers — they are not the verified answer.

Discussion 5 contributions

Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.

From public community threads 5

  1. BillaRanga 👍 11 Answered B
    The main Use case of S3 same region replication is "log aggregation, live replication between production and test accounts".
  2. ckhemani 👍 2 Answered B
    Option C and D is out ot question since it required operation overhead. Between A and B, Lifecycle is used to transfer between S3storage classes and not within same S3 Buckets. So B is correct answer.
  3. zdi561 👍 1 Answered B
    A and B can copy, but B is cheaper, it is free.
  4. Andy_09 👍 6
    Option B
  5. sandordini 👍 2 Answered B
    Needs to be B

Reader comments & corrections

No reader corrections yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

Submitted for moderation before publishing. Keep it helpful and respectful.

Practice All SAA-C03 Questions

Access 120 questions with complete answers and detailed explanations.

View Full SAA-C03 Practice Test →

← Back to SAA-C03 Study Guide