AWS Certified Data Engineer Associate DEA-C01 Practice Question

An enterprise must migrate a daily 100-GB feed of CSV files that external partners currently upload by using SFTP. The files must be stored in the company's Amazon S3-based data lake with encryption at rest. Partners must continue to use SFTP, and the company wants to authenticate users against its existing AWS Managed Microsoft AD without operating any EC2 hosts. Which solution meets these requirements with the least operational overhead?

Create an on-premises AWS Storage Gateway File Gateway, expose an SMB share to partners, and configure the gateway to upload received files to Amazon S3.
Launch an Amazon EC2 instance running OpenSSH, join it to AWS Managed Microsoft AD, enable SFTP access, and use a cron job to sync uploaded data to Amazon S3.
Order an AWS Snowball Edge device configured with an S3 bucket, have partners upload files via SFTP to the device each day, and return the device to AWS for data import.
Deploy an AWS Transfer Family server for SFTP, integrate it with AWS Managed Microsoft AD for user authentication, and map uploads to the target Amazon S3 bucket.

Report Issue

Answer Description

AWS Transfer Family provides a fully managed SFTP endpoint that can directly place uploaded objects into an Amazon S3 bucket where default server-side encryption protects data at rest. The service supports integration with AWS Managed Microsoft AD or AD Connector, allowing existing Active Directory credentials to authorize SFTP users. Because the service is managed, no EC2 instances need to be patched or scaled.

AWS Storage Gateway File Gateway exposes SMB/NFS, not SFTP, so partners would need to change protocols. Running an EC2-based OpenSSH server satisfies SFTP but adds maintenance for high availability, scaling, and patching. Shipping an AWS Snowball Edge every day is operationally complex, incurs latency, and is intended for offline bulk transfers, not daily network uploads.

Ask Bash

Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.