An application running in a VPC that uses the default DHCP options needs to resolve the on-premises SQL Server host name mssql.example.com, but DNS lookups fail. Which change will allow the VPC-hosted application to resolve that on-premises domain name?

To resolve on-premises domain names from a VPC, you need an Amazon Route 53 Resolver outbound endpoint. This endpoint allows DNS queries originating from your VPC to be forwarded to your on-premises DNS servers. A forwarding rule is then configured for the specific domain (e.g., example.com) to direct these queries to the appropriate on-premises DNS server IP addresses. The rule must be associated with the VPC where the application resides. Inbound endpoints are used for on-premises resources to resolve DNS records hosted in Route 53 within AWS, which is the opposite of what is needed here. System rules are automatically generated by Route 53 and are not configurable for forwarding to on-premises DNS.