AWS Route53 documentation change
Summary
Added documentation about NS record usage for private hosted zone delegation to on-premises resolvers
Security assessment
This is a technical documentation update about DNS configuration best practices. While DNS configuration impacts security, the change itself doesn't address vulnerabilities or document security features.
Diff
diff --git a/Route53/latest/DeveloperGuide/ResourceRecordTypes.md b/Route53/latest/DeveloperGuide/ResourceRecordTypes.md index 424aea176..36704d658 100644 --- a//Route53/latest/DeveloperGuide/ResourceRecordTypes.md +++ b//Route53/latest/DeveloperGuide/ResourceRecordTypes.md @@ -506,0 +507,2 @@ An NS record identifies the name servers for the hosted zone. Note the following + * Another use for an NS record is for private hosted zones when you create a delegate rule to delegate the authority for a subdomain to your on-premises resolver. You must create this NS record before you create a delegate rule. For more information, see [How Route 53 Resolver endpoint forwards DNS queries from your VPCs to your network](./resolver-overview-forward-vpc-to-network.html). +