A city’s multi-Region DR plan replicates compute templates and databases, but after failover the standby Region cannot decrypt application secrets. What dependency was likely missed?
Select an answer to reveal the explanation.
Short Explanation
Failover without keys is a locked vault in the backup building. Secrets and KMS must exist—or be replicable—in the secondary Region or decrypt fails even when servers boot. Compute templates alone are not a full DR kit.
Full Explanation
Multi-Region disaster recovery must include cryptographic and secret dependencies, not only compute and data stores. If AWS Secrets Manager secrets and AWS KMS keys (or appropriate multi-Region key/replica strategies) are unavailable in the standby Region, applications cannot decrypt configuration or data after failover. Extra primary-Region IPs or bastion volumes do not solve decrypt failures. Treat secrets and keys as first-class DR components.