AWS re:Post을(를) 사용하면 다음에 동의하게 됩니다. AWS re:Post 이용 약관
AWS re:Postre:Post

Access to specific DNS from EC2

0

We have a VPC with Internet access. Within the VPC we have an EC2 which does not allow internet access using the Security Group. We wish to allow specific DNS to be reachable from this EC2 (Egress). What are the possible options?

Essentially, looking for DNS filtering at the EC2 egress and not at the VPC.

The reason for specific DNS is that the IP associated with the DNS can change and we prefer not having a logic to dynamically update the security group.

주제
네트워킹 및 콘텐츠 전송
태그
아마존 VPC네트워킹 및 콘텐츠 전송보안 그룹도메인 이름 시스템(DNS)
언어
English
Rajas Gujarathi
질문됨 2달 전472회 조회
1개 답변
2

Have you thought about using Route53 Resolver DNS Firewall to do this?

https://docs.aws.amazon.com/vpc/latest/userguide/resolver-dns-firewall.html

Either way, you still have to allow the EC2 talk to a DNS Server and that in turn will allow recursive DNS queries.

profile picture
전문가
Gary Mclean
답변함 2달 전
profile picture
전문가
Oleksii Bebych
검토됨 2달 전
profile picture
전문가
Giovanni Lauria
검토됨 2달 전
  • Rajas Gujarathi
    2달 전

    Thanks, I will go through it. After reading the first paragraph, it appears to be at the VPC level. But will go through it in detail.

    "It can also block requests for public or private Amazon EC2 instance names." -> This seems promising, will have a more detail reading sometime later today.

로그인하지 않았습니다. 로그인해야 답변을 게시할 수 있습니다.

좋은 답변은 질문에 명확하게 답하고 건설적인 피드백을 제공하며 질문자의 전문적인 성장을 장려합니다.

질문 답변하기에 대한 가이드라인

관련 콘텐츠