ANS-C01 Question 275
Select 3Your organization has a multi-account AWS setup and requires a DNS architecture that allows seamless resolution of private domain names across all accounts. Additionally, your organization has an on-premises data center that requires access to these private domain names. You must design a solution that ensures low latency and fault tolerance for DNS resolution across accounts and between the AWS environment and the on-premises data center. Which combination of solutions should you implement?
- A
Use Amazon Route 53 Resolver endpoints to enable DNS resolution between on-premises and VPCs in multiple accounts.
- B
Configure a centralized Amazon Route 53 Private Hosted Zone in one account and associate it with all required VPCs in other accounts.
- C
Deploy an Amazon Route 53 Public Hosted Zone and use it for both on-premises and internal DNS resolution.
- D
Set up Transit Gateway to share DNS resolution rules across accounts and connect on-premises to AWS.
- E
Configure Route 53 Resolver rules to forward on-premises DNS queries to the centralized Private Hosted Zone.
Show answer and explanation
Correct answers: A, B, E
Explanation
The correct solution involves using Amazon Route 53 Resolver endpoints to connect on-premises DNS queries to AWS, setting up a centralized Private Hosted Zone for consistent DNS resolution across accounts, and configuring Route 53 Resolver rules to forward DNS queries appropriately. This approach ensures low latency and fault tolerance for DNS resolution in a hybrid and multi-account architecture.
- A. Correct.
Correct. Amazon Route 53 Resolver endpoints allow DNS queries to flow between on-premises environments and AWS VPCs. This is critical for hybrid DNS architectures.
- B. Correct.
Correct. A centralized Amazon Route 53 Private Hosted Zone can be associated with VPCs across multiple accounts, ensuring private domain name resolution across the AWS environment.
- C. Incorrect.
Incorrect. Public Hosted Zones are designed for public domain names and are not suitable for private DNS resolution within a multi-account setup or between on-premises and AWS.
- D. Incorrect.
Incorrect. While Transit Gateway is useful for network connectivity across accounts and on-premises, it does not handle DNS resolution or sharing DNS resolution rules.
- E. Correct.
Correct. Route 53 Resolver rules can forward DNS queries from on-premises to the centralized Private Hosted Zone, enabling seamless hybrid DNS resolution.