Access to specific DNS from EC2

We have a VPC with Internet access. Within the VPC we have an EC2 which does not allow internet access using the Security Group. We wish to allow specific DNS to be reachable from this EC2 (Egress). What are the possible options?

Essentially, looking for DNS filtering at the EC2 egress and not at the VPC.

The reason for specific DNS is that the IP associated with the DNS can change and we prefer not having a logic to dynamically update the security group.

主題

網路與內容交付

標籤

Amazon VPC 網路與內容交付安全性群組網域名稱系統 (DNS)

語言

English

Rajas Gujarathi

已提問 2 個月前檢視次數 472 次

1 個回答

最新
最多得票
最多評論

Have you thought about using Route53 Resolver DNS Firewall to do this?

https://docs.aws.amazon.com/vpc/latest/userguide/resolver-dns-firewall.html

Either way, you still have to allow the EC2 talk to a DNS Server and that in turn will allow recursive DNS queries.

專家

Gary Mclean

已回答 2 個月前

專家

Oleksii Bebych

已審閱 2 個月前

專家

Giovanni Lauria

已審閱 2 個月前

Rajas Gujarathi
2 個月前
Thanks, I will go through it. After reading the first paragraph, it appears to be at the VPC level. But will go through it in detail.

"It can also block requests for public or private Amazon EC2 instance names." -> This seems promising, will have a more detail reading sometime later today.

Access to specific DNS from EC2

相關內容