Passer au contenu

Can I use an external DNS server for name resolution when connecting Amazon Kendra to SharePoint?

0

Hello.

Can I use an external DNS server for name resolution when connecting Amazon Kendra to SharePoint?
If you look at the following document, Kendra SharePoint Connector can connect to VPC.
https://docs.aws.amazon.com/kendra/latest/dg/data-source-v2-sharepoint.html

So, I am wondering if it is possible to forward to external DNS by using Amazon Route 53 Resolver Outbound Endpoint.
For example, can "sharepoint.com," which is a domain for SharePoint, and "login.microsoftonline.com," which is used for EntraID authentication, be forwarded to an external DNS using a Route53 Resolver Outbound Endpoint?

3 réponses
2
Réponse acceptée

My hunch is yes. Looking at all the connectors available, the documentation states hostname every where. Now if your connecting to an On Prem or VPC instance and your using hostnames, it must use the Resolver and rules in the VPC.

Im going to assume its the same as lambda, it runs in its own VPC and works natively up until you connect it to your own VPC and then you have full control of what it can and cant do including name resolution.

If your resolving a public internet name when connected on the VPC, it will use the default resolver which can resolve xxxx.sharepoint.com without an outbound end point

EXPERT
répondu il y a un an
EXPERT
vérifié il y a un an
EXPERT
vérifié il y a un an
  • Thank you for your reply! I'll try testing it anyway.

1

Yes, you can use an external DNS server for name resolution when connecting Amazon Kendra to SharePoint by using Amazon Route 53 Resolver Outbound Endpoints. This setup forwards DNS queries for specific domains to an external DNS server, that is useful for resolving names not available in internal Route 53 hosted zones

EXPERT
répondu il y a un an
  • Thank you for your reply! I'll try testing it anyway.

1

To be sure, you shouldn't need any Route 53 configuration at all. The DNS names you mentioned, login.microsoftonline.com and tenantname.sharepoint.com are available on the public internet both in terms of network connectivity and DNS names. The names can be resolved by any DNS resolver, including the default Route 53 Resolver in your VPC.

EXPERT
répondu il y a un an
  • Yes, name resolution is actually possible with the default Route53 resolver in the VPC. I didn't write any background in the question, but I'm investigating because there was a request to use an external DNS server for name resolution as a requirement.

Vous n'êtes pas connecté. Se connecter pour publier une réponse.

Une bonne réponse répond clairement à la question, contient des commentaires constructifs et encourage le développement professionnel de la personne qui pose la question.