A streaming ETL pipeline feeds a customer-facing dashboard. If an entire AWS Region becomes unreachable, the pipeline must keep ingesting and serving within minutes rather than waiting for that Region to recover. Which design meets the requirement?
Show answer and explanation
Answer: D
Surviving a full Regional outage requires a second Region that already holds the data and can take over. Replicated storage and tables, with the services deployed in both places and a tested failover route, let traffic move when the primary is lost. Spreading capacity across Availability Zones protects against a single data center failure, not an entire Region.
Why the other options are wrong
- A. Multiple Availability Zones protect against the loss of one data center within a Region. If the whole Region fails, every zone in that Region fails with it.
- B. Same-Region AMI copies take hours to restore and depend on the failed Region being available to rebuild from. This misses the minutes-level requirement.
- C. Spot capacity lowers cost and can be interrupted, but it does not place workloads in another Region. Multiple AZs still share the same Regional failure domain.