Which Amazon VPC options do I need to turn on to use my private hosted zone?

2 minute read

I created a private hosted zone and associated it with a virtual private cloud (VPC). However, my domain names still aren't resolving. Which Amazon Virtual Private Cloud (Amazon VPC) options do I need to turn on to get my private hosted zone to work?


Domain Name System (DNS) hostnames and DNS resolution are required settings for private hosted zones. DNS queries for private hosted zones can be resolved by the Amazon-provided VPC DNS server only. As a result, these options must be turned on for your private hosted zone to work. To modify these options, see View and update DNS attributes for your VPC.

DNS hostnames

  • For non-default VPCs that aren't created using the Amazon VPC wizard, this option is turned off by default. If you create a private hosted zone for a domain and create records without turning on DNS hostnames, private hosted zones aren't turned on.
  • To use a private hosted zone, this option must be turned on.

DNS resolution

  • Private hosted zones accept DNS queries only from a VPC DNS server. The IP address of the VPC DNS server is the reserved IP address at the base of the VPC IPv4 network range plus two. Turning on DNS resolution allows you to use the VPC DNS server as a resolver for performing DNS resolution.
  • Keep this option turned off if you're using a custom DNS server in the DHCP options set and you're not using a private hosted zone.
  • This option and DNS hostnames must be turned on to resolve endpoint domains to private IP addresses for AWS Managed Services. Examples of these services include AWS PrivateLink and Amazon Relational Database Service (Amazon RDS).

Related information

Working with private hosted zones

AWS OFFICIALUpdated a year ago