When migrating a transactional database with sensitive data, the best exam decision is a managed database that reduces ops while meeting baseline security via encryption at rest.
Enable bucket default encryption for future writes, then use S3 Inventory + S3 Batch Operations to re-encrypt millions of existing objects in-place with minimal effort.
When an app runs behind ALBs in multiple AWS Regions and you want the best user performance, Route 53 latency-based routing (A/alias) is the default decision.
When workload grows on RDS for PostgreSQL but you can’t add new infrastructure, the most cost-effective path is typically vertical scaling plus committing with Reserved Instances.
Migrate a legacy SFTP workflow to AWS with Amazon S3 storage while keeping on-prem Microsoft AD authentication. The lowest-ops path is AWS Transfer Family using Directory Service AD Connector for identity federation.