Which S3 storage solution archives private documents at the lowest cost?
A company is planning to store a large number of archived documents and make the documents available to employees through the corporate intranet. Employees will access the system by connecting through a client VPN service that is attached to a VPC. The data must not be accessible to the public. The documents that the company is storing are copies of data that is held on physical media elsewhere. The number of requests will be low. Availability and speed of retrieval are not concerns of the company. Which solution will meet these requirements at the LOWEST cost?
Community Insight
The exam tests choosing an S3 storage class by access pattern, cost, and retrieval latency, not by picking the absolute cheapest storage tier; the trap is Glacier Deep Archive's restore workflow and website-hosting incompatibility.
This SAP-C02 scenario asks for the lowest-cost way to serve archived documents privately to employees through a VPC-attached client VPN. S3 One Zone-IA is the correct answer because the archive is a copy, requests are low, and one-zone durability is acceptable when speed and availability are not concerns.
Many learners choose Glacier Deep Archive (D) because it has the lowest per-GB storage price, overlooking restore delays, retrieval costs, and the fact that archived objects cannot be served directly by S3 website hosting.
Community Discussion (147 comments)
Comments & Corrections
No comments yet — spotted an error or have a note? Share it below.
Expert Analysis
Why the Answer Is Correct
Option A is the best fit because S3 One Zone-IA is designed for infrequently accessed, re-creatable data that does not need multi-AZ resilience. The scenario explicitly says the documents are copies of data held on physical media elsewhere, requests are low, and availability/speed are not concerns, so paying for Standard or multi-AZ storage is unnecessary. S3 also avoids running and patching an EC2 web server plus EFS/EBS, and the interface endpoint gives private access from the VPC-attached client VPN without exposing the bucket publicly. Although the website-hosting wording is technically awkward with an interface endpoint, A still uses the correct low-cost storage class and private S3 access pattern.Why the Other Options Are Wrong
Option B uses EFS One Zone-IA, which is far more expensive per GB than S3 One Zone-IA and requires an EC2 server, so it cannot be lowest cost. Option C uses EBS sc1 on a single EC2 instance; sc1 is cheap per GB but still needs an EC2 server, is limited by volume size, and does not provide S3's durable object-storage model. Option D uses Glacier Deep Archive, whose per-GB price is lower, but objects must be restored before they can be read; S3 website hosting cannot serve an unrestored Deep Archive object, and a restore/notification workflow would add complexity and retrieval costs. The exam's "lowest cost" means the lowest total solution that actually makes documents available, not the cheapest storage line item.Community Comment Notes
Learners split mainly between A and D. tman22 initially noted that "Glacier Deep Archive can't be used for web hosting," while also considering D if the intranet triggers restores; a54b16f argued that using Glacier would require a separate restore application, saying you "Need to develop a whole new application" to request unarchiving. Maria2023 and Dimidrol reinforced A from the website-hosting angle, with Dimidrol reporting an actual "operation invalid for object storage class" error when serving archived objects. OnePunchExam's D-leaning point is fair that the frontend could handle restores, but the question gives no such workflow, so A is the safer exam answer for immediate, private, low-cost access.Official Reference
Exam Strategy
When an SAP-C02 question says "lowest cost," compare total cost, not just storage price: Glacier Deep Archive adds restore latency and retrieval fees. Also separate archive storage from the serving path: if users must browse documents through an intranet, the storage class must allow on-demand reads or include a restore workflow.
Frequently Asked Questions
Why is S3 Glacier Deep Archive not the lowest-cost answer here?
Its per-GB storage is cheaper, but restoring archived objects takes hours and adds retrieval/request costs; without a restore workflow the intranet cannot serve them directly.
Why does S3 One Zone-IA fit data copied from physical media?
Because the archive is a secondary copy, losing one Availability Zone does not lose the only copy, and One Zone-IA costs less than Standard-IA.
Related Analysis
Practice All SAP-C02 Questions
Access 85 questions with complete answers and detailed explanations.
View Full SAP-C02 Practice Test →