Which solution will meet these requirements?
Create a Route 53 inbound endpoint. Ensure that security groups and routing allow the traffic from the on-premises data center. Configure the DNS server on the on-premises network to conditionally forward DNS queries for the private hosted zone’s domain name to the IP addresses of the inbound endpoint.
Create a Route 53 outbound endpoint. Ensure that security groups and routing allow the traffic from the VPC. Configure the DNS server on the on-premises network to conditionally forward DNS queries for the private hosted zone’s domain name to the IP addresses of the outbound endpoint.
Edit the private hosted zone in Route 53 with a TXT record that references the on-premises DNS servers. Configure the DNS server on the on-premises network to conditionally forward DNS queries for the private hosted zone’s domain name to the base of the VPC CIDR IPv4 network range, plus two.
Edit the private hosted zone in Route 53 with a PTR record that references the on-premises DNS servers. Configure the DNS server on the on-premises network to conditionally forward DNS queries for the private hosted zone’s domain name to the base of the VPC CIDR IPv4 network range, plus two.
Explanations:
A Route 53 inbound endpoint allows DNS queries from on-premises servers to be forwarded to Route 53 for resolution of private hosted zones. The on-premises DNS server must be configured to forward queries for the private hosted zone’s domain name to the inbound endpoint’s IP addresses. Security groups and routing should be adjusted to allow traffic.
A Route 53 outbound endpoint is used for forwarding DNS queries from AWS to on-premises DNS servers, not for the reverse scenario where on-premises servers need to forward queries to AWS.
A TXT record cannot be used to reference on-premises DNS servers for DNS forwarding. The configuration described here is not valid for DNS resolution in a hybrid environment.
A PTR record is used for reverse DNS lookups, not for DNS forwarding. Also, DNS forwarding cannot be configured using this approach.
If memory serves me right, the answer is:
Create a Route 53 inbound endpoint. Ensure that security groups and routing allow the traffic from the on-premises data center. Configure the DNS server on the on-premises network to conditionally forward DNS queries for the private hosted zone’s domain name to the IP addresses of the inbound endpoint.