The correct answer is Set up an AWS Backup plan to create monthly backups of the DynamoDB table. Configure the lifecycle policy to move backups to cold storage after 6 months and retain them for 7 years. AWS Backup provides native support for DynamoDB and offers built-in lifecycle management. It allows you to schedule backups automatically, apply cold storage transitions, and enforce long-term retention without writing custom code or managing manual processes. This approach is efficient, compliant, and reduces operational overhead.

The option Manually generate DynamoDB on-demand backups each month and copy them to Amazon S3 Glacier Flexible Retrieval after 6 months is not feasible because DynamoDB native backups are not stored in S3 and cannot be directly moved to S3 Glacier tiers. This process also introduces unnecessary manual steps.

The choice Use the AWS CLI with a cron-based EventBridge rule to create monthly backups. Include options in the command to move old backups to cold storage and expire them after 7 years is not valid because the AWS CLI does not offer direct parameters to configure backup lifecycle transitions in a single command. Lifecycle policies are managed separately through AWS Backup, not via CLI flags.

The response Develop a custom script using the AWS SDK to initiate monthly DynamoDB backups. Use another script to transition old backups to cold storage and delete expired ones is overly complex. While theoretically possible, it requires building and maintaining automation logic that AWS Backup already handles natively with less risk and cost.

This question tests your understanding of backup lifecycle management and how AWS Backup simplifies long-term compliance workflows. A common trap is to assume backups must be exported or scripted manually. However, AWS Backups tight integration with DynamoDB and support for lifecycle policies makes it the most streamlined and compliant solution.

The difficulty in this question lies in recognizing that not all AWS services can be used interchangeablyDynamoDB backups do not integrate with S3 Glacier directly. Identifying AWS Backup as the central backup management tool is key to selecting the right answer.

Full AWS Practitioner Certification Question