Question

A company connects its on-premises data center to an AWS VPC using a Site-to-Site VPN. On-premises servers need to resolve the private DNS names of resources hosted in a Route 53 private hosted zone associated with the VPC. Currently, on-premises DNS queries for these private names fail, while EC2 instances inside the VPC resolve the names correctly. What should the SysOps administrator implement to enable on-premises resolution of the private hosted zone records?

Accepted Answer

Create a Route 53 Resolver inbound endpoint in the VPC and configure on-premises DNS servers to forward queries for the private domain to the endpoint's IP addresses.

Answer

Create a Route 53 Resolver outbound endpoint in the VPC and add a forwarding rule pointing to the on-premises DNS servers.

Answer

Convert the private hosted zone to a public hosted zone so that on-premises servers can resolve the records over the internet.

Answer

Associate a second VPC CIDR block with the private hosted zone and update the VPN route tables to include it.