AWS Route53不支持将同一VPC与多个共享相同父域的私有托管区关联起来,因此无法解决此冲突域问题。不过,可以通过将所有相关资源放在同一个VPC中来实现一个解决方案,并确保任何其他区域或VPC都不具有相同的域名。
以下为示例代码:
---
AWSTemplateFormatVersion: '2010-09-09'
Resources:
VPC:
Type: 'AWS::EC2::VPC'
Properties:
CidrBlock: '10.0.0.0/16'
EnableDnsSupport: true
EnableDnsHostnames: true
PrivateHostedZone:
Type: 'AWS::Route53::HostedZone'
Properties:
Name: 'example.com'
VPCs:
- VPCId: !Ref VPC
VPCRegion: !Ref AWS::Region
EC2Instance:
Type: 'AWS::EC2::Instance'
Properties:
ImageId: ami-0c55b159cbfafe1f0
InstanceType: t2.micro
KeyName: my_key
SubnetId: !Ref Subnet
SecurityGroupIds:
- !Ref SG
Subnet:
Type: 'AWS::EC2::Subnet'
Properties:
VpcId: !Ref VPC
CidrBlock: '10.0.1.0/24'
SG:
Type: 'AWS::EC2::SecurityGroup'
Properties:
GroupDescription: Allow SSH from VPC
SecurityGroupIngress:
- IpProtocol: tcp
FromPort: 22
ToPort: 22
CidrIp: '10.0.0.0/16'