Question

A company runs an on-premises data center connected to an AWS VPC over AWS Direct Connect. Applications running on servers in the data center need to resolve the private DNS names of resources hosted in a Route 53 private hosted zone associated with the VPC. Currently, on-premises DNS queries for these private names fail because the on-premises DNS servers cannot forward queries to AWS. Which solution enables the on-premises servers to resolve the private hosted zone records?

Accepted Answer

Create a Route 53 Resolver inbound endpoint in the VPC and configure the on-premises DNS servers to forward queries for the private zone domain to the endpoint's IP addresses.

Answer

Create a Route 53 Resolver outbound endpoint in the VPC and add a forwarding rule pointing to the on-premises DNS servers.

Answer

Associate the private hosted zone with the on-premises network by adding the data center CIDR to the hosted zone's VPC association list.

Answer

Enable DNS resolution and DNS hostnames on the VPC and add the on-premises DNS server IPs to the VPC DHCP option set.