Question 370
While investigating a cross-account AWS design, the decisive constraint is: A disaster-recovery design publishes two Regions but both depend on the same sole corporate identity server. Which recommendation best addresses the actual bottleneck?
Explanation
Correct Answer
Remove the shared identity single point with resilient federated access and tested fallback. Multi-region compute cannot compensate for a shared unavailable authentication dependency.
Incorrect Answers
Add meaningful endpoint health checks to regional Route 53 latency records solves the related scenario An application uses latency routing without checking health and sends users to a failed low-latency Region; health-aware latency routing avoids selecting an unavailable low-latency target.
Although Probe a representative application transaction endpoint and alert on business failures can be valid when A Route 53 failover health check tests a static home page but misses failed checkout transactions, it targets a different technical condition. A shallow endpoint can appear healthy while essential application behavior is broken.
This alternative, Add gateway VPC endpoints and AZ-resilient network routes for AWS dependencies, is appropriate when An EC2-backed application survives AZ failure but S3 access fails because route tables point through a dead NAT gateway. Endpoint paths remove a fragile zonal NAT dependency from regional S3 access.