AWS Certified CloudOps Engineer Associate SOA-C03 Practice Question

An organization with several AWS accounts wants every Amazon RDS DB instance to receive a daily backup that is retained for 35 days and automatically copied to a secondary AWS Region. The solution must enforce the policy across all accounts, provide centralized compliance reporting, and require no custom code or per-account maintenance. Which solution meets these requirements MOST efficiently?

Create an AWS Backup backup vault and daily backup plan in a delegated administrator account, set a 35-day retention period and cross-Region copy rule, and assign the plan to all AWS accounts through AWS Organizations.
Use AWS Systems Manager Automation to run nightly in each account, call the create-db-snapshot API, and apply Amazon Data Lifecycle Manager policies to copy and expire snapshots after 35 days.
Deploy an AWS CloudFormation StackSet that adds an EventBridge rule in all accounts to invoke AWS Backup StartBackupJob daily, then run an Amazon S3 Batch Operations job to replicate snapshots cross-Region.
Enable automated backups on each RDS instance and deploy an AWS Lambda function in every account that copies new snapshots to the target Region and deletes snapshots older than 35 days.

Report Issue

Answer Description

AWS Backup natively supports Amazon RDS and offers backup plans that include scheduling, retention, and cross-Region copy rules. When AWS Backup is integrated with AWS Organizations, a delegated administrator can assign a single backup plan to all current and future accounts, ensuring consistent policy enforcement. The service's built-in monitoring and AWS Backup Audit Manager reports satisfy the centralized reporting requirement.

The Lambda-based and Systems Manager approaches rely on custom scripts and per-account components, violating the no-code and centralized-management criteria. Data Lifecycle Manager does not manage RDS snapshots, so it cannot satisfy the retention or copy requirements. The CloudFormation/EventBridge option still requires custom automation and incorrectly uses S3 Batch Operations, which does not copy RDS snapshots across Regions.

Ask Bash

Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.