ANS-C01 Question 333
Single answerYour company operates a multi-region application hosted in multiple VPCs in different AWS accounts. To simplify operational management, you want to centralize DNS resolution across all your VPCs and ensure that all VPCs can resolve domain names hosted in a central VPC. What is the most effective solution to achieve this using AWS services?
- A
Use AWS Transit Gateway to route DNS queries between VPCs and configure Route 53 Resolver Endpoints in each VPC.
- B
Set up a centralized Route 53 Private Hosted Zone in one VPC and associate it with all the other VPCs in the environment.
- C
Deploy an Amazon EC2 instance running BIND DNS server in a central VPC and configure VPC peering for DNS resolution.
- D
Use Route 53 Resolver with inbound and outbound endpoints in the central VPC and configure forwarding rules for DNS resolution.
Show answer and explanation
Correct answer: D
Explanation
The most effective solution for centralizing DNS resolution across multiple VPCs is to use Route 53 Resolver with inbound and outbound endpoints. This approach allows you to set up forwarding rules for DNS queries, providing seamless resolution within and across VPCs as well as to on-premises networks. It is a fully managed solution, reducing operational overhead and ensuring scalability.
- A. Incorrect.
AWS Transit Gateway is used for inter-VPC routing but does not handle DNS resolution. Additionally, configuring Route 53 Resolver Endpoints in each VPC would not centralize DNS management.
- B. Incorrect.
While a centralized Route 53 Private Hosted Zone can work, it requires that the private hosted zone be explicitly associated with every VPC. This approach does not support DNS forwarding to external or hybrid environments.
- C. Incorrect.
Using an EC2 instance running BIND DNS server is a manual and less reliable solution that requires significant operational overhead and does not leverage managed AWS services for DNS resolution.
- D. Correct.
Route 53 Resolver with inbound and outbound endpoints provides a managed and scalable way to centralize DNS resolution. It allows you to forward queries between VPCs and external environments efficiently, meeting the requirements of the scenario.