Route53 Private Hosted Zone Stack

Route53 Private DNS with Resolver Forwarding

A CloudFormation stack that sets up a private hosted zone associated across multiple VPCs, Route53 Resolver inbound and outbound endpoints, and forwarding rules to push on-premises domain queries to your internal DNS servers.

What's Included

• Private hosted zone associated with up to 5 VPCs (extend via parameters)
• Route53 Resolver inbound endpoint — lets on-premises resolvers query AWS DNS
• Route53 Resolver outbound endpoint with forwarding rules for on-prem domains
• Security groups scoped to DNS port 53 TCP/UDP from allowed CIDRs
• Example A and CNAME records demonstrating the zone structure

What You Get

• private-hosted-zone.yaml — CloudFormation template
• parameters/ — parameter files for single-VPC and multi-VPC scenarios
• resolver-rules.yaml — separate stack for Resolver rules and endpoint config
• README.md — association steps for additional VPCs, on-prem DNS integration guide

Requirements

• AWS account with Route53 and EC2 permissions
• Existing VPCs to associate (VPC IDs and region provided as parameters)
• On-premises DNS server IP(s) for outbound forwarding rules (optional)