ANS-C01 Question 49
Select 3Your organization operates a hybrid cloud architecture across multiple AWS accounts and Regions. You need to configure DNS resolution for internal resources in your on-premises data center and AWS environments. Additionally, you want to ensure failover between Regions for critical applications and manage DNS across accounts securely. Which combination of solutions should you use to achieve this?
- A
Use Route 53 Resolver to enable DNS query forwarding between on-premises and AWS VPCs.
- B
Configure Route 53 Private Hosted Zones with cross-account association to share DNS records between accounts.
- C
Deploy Route 53 geolocation routing policies to manage DNS failover between Regions.
- D
Use AWS Transit Gateway to centralize DNS resolution across multiple accounts and Regions.
- E
Integrate Route 53 with AWS Resource Access Manager (RAM) to share hosted zones across accounts.
Show answer and explanation
Correct answers: A, B, E
Explanation
To integrate Route 53 in a hybrid, multi-account, and multi-Region architecture, you need to address DNS resolution for on-premises and AWS environments, securely share DNS records, and ensure failover capabilities. Route 53 Resolver enables DNS query forwarding between on-premises and AWS. Route 53 Private Hosted Zones with cross-account association and AWS RAM ensure DNS sharing and management across accounts. Geolocation routing and Transit Gateway are not relevant to DNS failover or resolution requirements in this scenario.
- A. Correct.
Correct: Route 53 Resolver allows seamless DNS query forwarding and resolution between on-premises environments and AWS VPCs, which is essential for hybrid architectures.
- B. Correct.
Correct: Route 53 Private Hosted Zones can be associated with VPCs in different accounts using cross-account VPC sharing or AWS RAM, enabling a unified DNS resolution strategy.
- C. Incorrect.
Incorrect: Geolocation routing policies are not designed for failover between Regions. Failover routing policies would be more appropriate for this use case.
- D. Incorrect.
Incorrect: AWS Transit Gateway is used for networking purposes, such as connecting VPCs and on-premises environments, but it does not directly manage DNS resolution.
- E. Correct.
Correct: AWS RAM can be used to securely share Route 53 Private Hosted Zones across multiple AWS accounts, improving manageability and security.