Exam AWS Certified Advanced Networking - Specialty ANS-C01 topic 1 question 52 discussion

A - correct. Option A is the correct answer because it creates a private hosted zone in the shared services account with an alias record that points to the interface endpoint, and associates the private hosted zone with the spoke VPCs in each AWS account. Disabling the private DNS name of the interface endpoint ensures that DNS resolution of the endpoint is restricted to the Amazon Route 53 private hosted zone. This option creates a centralized model for managing interface endpoints and Route 53 zones in a shared services AWS account, which simplifies administration and reduces complexity.

Option A creates a private hosted zone in the shared services account with an alias record that points to the interface endpoint. This allows DNS resolution of the endpoint to be restricted to the Amazon Route 53 private hosted zone. By disabling the private DNS name of the interface endpoint, DNS resolution is further restricted to only the private hosted zone, which prevents traffic from leaking out onto the public internet. Associating the private hosted zone with the spoke VPCs in each AWS account ensures that all network traffic destined for the interface endpoint is routed through the shared services account. This centralized model simplifies administration and reduces complexity by allowing a single point of management for all interface endpoints and Route 53 zones in the shared services account.

A is answer!!!

A is the correct answer. Instead of using the service-created private hosted zone that is associated with the endpoint creation, we you need to manually create it to have the flexibility of sharing it with other VPC's. That is done by disabling private dns name for the endpoint.

I think that it's correcty answer is A.

A is the right answer.

Yeah, A - no doubt.

+ A is correct.

A is correct because it centralizes in the shared service and VPC

A - correct

AAAAAAAAAAAA