AWS Certified Advanced Networking – Specialty (ANS-C01)Network DesignHard
A financial institution needs to establish a highly available and secure hybrid DNS resolution strategy. On-premises DNS servers must be able to resolve AWS private hosted zones, and AWS workloads must be able to resolve on-premises DNS records. The solution should minimize latency and provide redundancy. Which combination of AWS services should be used?
- AAWS Directory Service for Microsoft Active Directory and Route 53 private hosted zones.
- BVPC endpoint for Route 53 and a Site-to-Site VPN connection.
- CAmazon Route 53 Resolver Endpoints and Conditional Forwarders on-premises.
- DCustom DNS servers deployed on EC2 instances in each VPC.
Show answer & explanationAnswer & explanation
Correct answer: C. Amazon Route 53 Resolver Endpoints and Conditional Forwarders on-premises.
Route 53 Resolver Endpoints (Inbound and Outbound) provide the necessary bidirectional DNS resolution between on-premises and AWS. Inbound endpoints allow on-premises DNS servers to forward queries for AWS private hosted zones to AWS. Outbound endpoints allow AWS VPCs to forward queries for on-premises domains to on-premises DNS servers, configured via conditional forwarders.
Why the other options are wrong
- A. AWS Directory Service helps manage identities but doesn't inherently provide the hybrid DNS forwarding mechanism without Resolver Endpoints.
- B. A VPC endpoint for Route 53 is for accessing the Route 53 API, not for hybrid DNS resolution between VPCs and on-premises. Site-to-Site VPN provides connectivity, but not the DNS forwarding mechanism.
- D. Custom DNS servers on EC2 instances are complex to manage, scale, and secure, and don't offer the native integration and redundancy of Route 53 Resolver Endpoints.
Route 53 Resolver Endpoints (Hybrid DNS)
AWS Route 53 Resolver Endpoints facilitate bidirectional DNS resolution between your Amazon VPCs and your on-premises DNS infrastructure.
- Inbound endpoints: On-premises resolves AWS private zones
- Outbound endpoints: AWS resolves on-premises domains
- Provides high availability and redundancy
- Leverages conditional forwarding for specific domains
Memory trick: Resolver Endpoints are your DNS diplomats for hybrid peace.