Review set 2 – Question 3 – Related to DNS resolution

[marijohn]

The question does not mention about any on-premise resources. Both custom AD domain and VPC endpoints are AWS resources so I don’t understand why the answer includes ‘outbound endpoint’ as one of the options. I don’t think the answers are correct for this question. Please explain.

[Neil-TutorialsDojo]

Hello marijohn,

Thank you for posting here.
According to the AWS Documentation:
“Before your EC2 client instances and managed services are able to authenticate and join the AWS Managed Microsoft AD, they must resolve the directory’s fully qualified domain name (FQDN). On the flip side, the DNS service running on the Directory Service is NOT aware of any other AWS Services that exist in the VPC such as PrivateLink Endpoints, Private Hosted Zones, Amazon EFS, etc.”
–(https://aws.amazon.com/blogs/networking-and-content-delivery/integrating-your-directory-services-dns-resolution-with-amazon-route-53-resolvers/) see also attached image pls

Therefore, you would need an outbound endpoint to forward and resolve custom domain names inside your VPC.

I hope this helps. If you have more question, pls don’t hesitate to ask.

Regards,
Neil @ Tutorials Dojo