使用AWS re:Post即您表示您同意 AWS re:Post 使用条款
AWS re:Postre:Post

Access to specific DNS from EC2

0

We have a VPC with Internet access. Within the VPC we have an EC2 which does not allow internet access using the Security Group. We wish to allow specific DNS to be reachable from this EC2 (Egress). What are the possible options?

Essentially, looking for DNS filtering at the EC2 egress and not at the VPC.

The reason for specific DNS is that the IP associated with the DNS can change and we prefer not having a logic to dynamically update the security group.

主题
网络和内容交付
标签
亚马逊 VPC网络和内容交付安全组域名系统 (DNS)
语言
English
Rajas Gujarathi
已提问 2 个月前472 查看次数
1 回答
2

Have you thought about using Route53 Resolver DNS Firewall to do this?

https://docs.aws.amazon.com/vpc/latest/userguide/resolver-dns-firewall.html

Either way, you still have to allow the EC2 talk to a DNS Server and that in turn will allow recursive DNS queries.

profile picture
专家
Gary Mclean
已回答 2 个月前
profile picture
专家
Oleksii Bebych
已审核 2 个月前
profile picture
专家
Giovanni Lauria
已审核 2 个月前
  • Rajas Gujarathi
    2 个月前

    Thanks, I will go through it. After reading the first paragraph, it appears to be at the VPC level. But will go through it in detail.

    "It can also block requests for public or private Amazon EC2 instance names." -> This seems promising, will have a more detail reading sometime later today.

您未登录。 登录 发布回答。

一个好的回答可以清楚地解答问题和提供建设性反馈，并能促进提问者的职业发展。

回答问题的准则

相关内容