How does Route53 protect from DNS poisoning for AWS Services like Amazon Workspaces

AWS's standard identity and authentication systems provide protection against people impersonating you to modify your authoritative DNS data in Route 53. DNS poisoning attacks can also target DNS caches or resolvers. Since Route 53 only operates authoritative DNS servers we are not directly susceptible to these types of attacks and your choice of Route 53 as your DNS provider should not affect your threat level.

Additionally, you can configure DNSSEC for domain registration as described here