Amazon Technologies, Inc.

Matthew Engskow

Jeffrey Joseph Damick

Kiran Thunga

Yu Wang

Huida Tao

Bing Xia

Vikram Saurabh

Quan Jia

Yohanes Santoso

Daniel Bradley

Mekias Mebrahtu Yohannes

Abhinav Punj

Rishi Goel

Kevis Tsao

Abhay Raina

Alexander Thomas Herrick

Hemakshi Sharma

A container may be created, and a plurality of domain name system (DNS) configuration objects may be added to the container. The plurality of DNS configuration objects may comprise at least one of private DNS zones, outbound forwarding rules, DNS query log configurations, and firewall rule groups. The container may be associated with a plurality of private logical networks. The container may also be across a plurality of customer accounts. Based on the plurality of DNS configuration objects, a plurality of DNS operations associated with the plurality of private logical networks may be performed. The plurality of DNS operations may comprise at least one of DNS query resolution, DNS query outbound forwarding, configuring a query log, or configuring a firewall.

Container-based association and sharing of domain name system configuration objects

Methods, systems, and computer-readable media for customized domain name resolution for virtual private clouds are disclosed. A domain name system (DNS) resolution service receives a DNS request from a computing resource associated with a virtual private cloud (VPC) in a cloud provider network. The service determines that the VPC is associated with one or more firewall rules. Responsive to determining that the VPC is associated with the firewall rule(s), the service determines whether the DNS request is allowed or blocked according to the one or more firewall rules. If the DNS request is allowed, the service resolves the DNS request using a DNS server and returns a response to the computing resource. If the DNS request is blocked, the service does not resolve the DNS request.

Customized domain name resolution for virtual private clouds

Systems and methods are provided for domain name system (DNS) resolutions in a network environment that includes multiple virtual private clouds (VPCs) attached indirectly to each other via a transit gateway that serves as a hub in a hub and spoke model. An administrator of a VPC may specify rules for resolving DNS resolution requests at the given VPC, and the rules may be taken into account by DNS resolvers at other VPCs attached to the same transit gateway based on information propagated by the transit gateway.

Domain name resolution in environment with interconnected virtual private clouds

Growing community of inventors

Arlington, VA, United States of America

Matthew Engskow