Route53
Resolver Conditional forward rules R53 Resolver - single endpoint which can represent multiple VPC in multiple accounts in the same region. Made of 1 or more ENI. Available in each AZ. Resolver checks if its Private Hosted zone (higher priority) followed by VPC DNS and then to Public DNS. Inbound endpoints - Traffic from on-premise will reach R53 resolver through the inbound endpoint. The IEP will be in the central VPC. Need not be in all other VPCs. Individual VPC will have R53 PHZ and Associate all those Private hosted zone to central VPC. Outbound endpoints We may have zones in On-premises which our EC2 instance may have to resolve. On-prem has its DNS server. OEP - R53 resolver to query your on-premise DNS resolvers. We need to create resolver rules to tell how to resolve Forward and System - 2 types of rule Forward has precedence over System rules. Create OEP in central and just share the rules with all the individual VPC (dont need to have OEP in each VPC). For VPC in other ...