SOA-C02 Question 257
Single answerYour company has multiple VPCs in a single AWS Region, and each VPC uses its own private hosted zone in Amazon Route 53 for internal DNS resolution. You are tasked with enabling DNS resolution across these VPCs to allow services in one VPC to resolve private domain names hosted in another VPC. Which solution will meet this requirement?
- A
Create Route 53 Resolver rules in each VPC to forward DNS queries to the private hosted zones of the other VPCs.
- B
Associate all VPCs with a single private hosted zone in Route 53.
- C
Enable VPC peering between the VPCs and configure DNS resolution over the peered connections.
- D
Use Route 53 Resolver inbound and outbound endpoints to forward queries between the VPCs.
Show answer and explanation
Correct answer: D
Explanation
To enable DNS resolution across multiple VPCs, you can use Route 53 Resolver inbound and outbound endpoints. These endpoints allow you to forward DNS queries between VPCs, ensuring that private hosted zones in one VPC can resolve domain names for services in another VPC. Other options, such as VPC peering or creating Resolver rules, do not natively support this functionality or require additional steps that are not as effective or scalable.
- A. Incorrect.
Incorrect: Route 53 Resolver rules can only forward DNS queries to on-premises or external DNS servers, not between private hosted zones in separate VPCs.
- B. Incorrect.
Incorrect: A private hosted zone can only be associated with VPCs within the same account and cannot support VPCs in different accounts or enable cross-VPC DNS resolution without additional configuration.
- C. Incorrect.
Incorrect: While VPC peering allows network connectivity, it does not automatically enable DNS resolution for private hosted zones across VPCs. Additional configuration is required.
- D. Correct.
Correct: Route 53 Resolver inbound and outbound endpoints enable DNS query forwarding between VPCs, allowing services in one VPC to resolve private domain names hosted in another VPC.