-
Hi khawaja,
Thanks for the reply.
All clients should just forward all DNS queries to the AD server, as should be set on their network configuration. The AD will accept all the queries and will try to resolve all DNS queries by itself. Then if it encounters anything that it is not familiar with, like names for EC2 instances (ec2-192-0-2-44.compute-1.amazonaws.com) or RDS endpoints such as (myexampledb.a1b2c3d4wxyz.us-west-2.rds.amazonaws.com), Then the AD server will forward any non-authoritative DNS queries to the VPC resolver.
Hope this helps.
Let us know if you need further assistance. The Tutorials Dojo team is dedicated to helping you pass your AWS exam!
Regards,
Kenneth Samonte @ Tutorials Dojo
