An insurance company is planning the migration of workloads from its on-premises data center to the AWS Cloud. The company requires end-to-end domain name resolution. Bi-directional DNS resolution between AWS and the existing on-premises environments must be established. The workloads will be migrated into multiple VPCs. The workloads also have dependencies on each other, and not all the workloads will be migrated at the same time. Which solution meets these requirements?
Select one answer.
Marked answer: A
Community Discussion
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
Chose D1
A is wrong: Resolver rules forward queries to DNS servers. They cannot forward queries to a Route 53 Private Hosted Zone in another VPC. Private Hosted Zones: provide authoritative DNS for AWS resources and are made available to the VPCs that need them.
Chose A2
A. B: No. Public zones are for internet-facing domains, not internal VPC resolution. VPCs need private zones for internal DNS. C: No. Forwarding to outbound endpoints is incorrect. Outbound endpoints send queries from AWS, not receive them. Inbound endpoints are needed. D: No. Resolver rules need VPC association, but “associate outbound rules with VPCs” is unclear—rules are typically associated via outbound endpoints in the egress VPC. Associating rules directly with application VPCs contradicts the egress VPC model (rules should stay centralized).
1
A is right * associate the private hosted zones with the egress VPC, allowing centralized DNS management, while sharing the rules through RAM for consistency
