[Ice-Guy]

The answer is definitely Outbound Resolver instead of Inbound Resolver as this scenario asked for EC2 instances within the VPC are unable to resolve the private endpoint addresses.