Question 30: You need to copy data from a Redshift cluster to another Redshift cluster. Total size of the data is 1TB . There is also a requirement that data should be encrypted while in-transit as well as at rest.

Which of the following is an ideal solution for given requirement?

1. You will be using AWS Glue to copy data while using Select query on the Redshift table .

2. You will be using AWS Redshift UNLOAD command with the KMS Data Key, by enabling encryption. This command will store data in an S3 bucket. Then you will copy data from S3 to new Redshift Cluster .

3. You will be using AWS Redshift UNLOAD command with the KMS Data Key, by enabling encryption. This command will be stored data in an encrypted S3 bucket. Then you will copy data from S3 to new

Redshift Cluster.

4. You will be using AWS Redshift UNLOAD command with the KMS Data Key, by enabling encryption. This command will be stored in an Encrypted EBS Volume. Then you will copy data from EBS volume to new

Redshift Cluster.

Correct Answer : 2 Exp : In this question you wanted to copy data from one Redshift cluster to another Redshift cluster. While copying data it must be encrypted even it is in-transit or at rest.

Recently Redshift announced that using UNLOAD command data can be copied from Cluster to S3 bucket. And you can use AWS KMS Key by enabling encryption. So that data will be encrypted using S3 SSE (Server Side

Encryption). COPY command loads Amazon S3 server-side encrypted data files without requiring you to provide the key. Hence, option-2 is correct in this case.

2