A CloudOps engineer wants to share a copy of a production database with a migration...

Vendor: Amazon Web Services
Product: SOA-C03
Update on: Jun 13, 2026
Questions: 219

Amazon Web Services SOA-C03 Question Answer

A CloudOps engineer wants to share a copy of a production database with a migration account. The production database is hosted on an Amazon RDS DB instance and is encrypted at rest with an AWS Key Management Service (AWS KMS) key that has an alias of production-rds-key.

What must the CloudOps engineer do to meet these requirements with the LEAST administrative overhead?

Take a snapshot of the RDS DB instance. Update the KMS key policy to allow access for the migration account root user. Share the snapshot with the migration account.

Create an RDS read replica in the migration account. Replicate the KMS key.

Take a snapshot and create a new KMS key in the migration account with the same alias.

Export the database to Amazon S3 and import it into a new RDS instance.