Vital-records systems must stay readable if the primary Region fails. The county accepts active-passive cost and wants DNS to shift traffic when the primary is unhealthy. Which design fits?
Select an answer to reveal the explanation.
Short Explanation
Keep a warm spare Region for vital records and let health-checked DNS flip the sign when the primary goes dark. That’s classic active-passive reliability.
Full Explanation
Active-passive multi-Region architectures replicate data to a standby Region and use Route 53 health-based failover to shift traffic when the primary fails. Uncontrolled active-active writes without conflict handling, single-Region only, or DNS that ignores failed health checks undermine the DR goal. For vital records, health-based DNS failover with a tested passive Region matches reliability requirements.