Skip to main content

AWS SOA-C02 Drill: Route 53 Routing - Cost-Effective NLB Alias Record

Jeff Taakey
Author
Jeff Taakey
21+ Year Enterprise Architect | AWS SAA/SAP & Multi-Cloud Expert.

The Jeff’s Note (Contextual Hook)
#

Jeff’s Note
#

Unlike generic exam dumps, ADH analyzes this scenario through the lens of a Real-World Site Reliability Engineer (SRE).

For SOA-C02 candidates, the confusion often lies in selecting the correct Route 53 record type to efficiently and cost-effectively route traffic to a Network Load Balancer. In production, this is about knowing exactly which DNS record type is a Route 53 alias and its cost benefits over CNAME or other records when fronting an NLB. Let’s drill down.

The Certification Drill (Simulated Question)
#

Scenario
#

CloudShift Solutions operates a public-facing web application hosted behind a Network Load Balancer (NLB). The NLB is internet-facing but does not have any Elastic IP addresses assigned to it. Users must access the application using the company’s branded domain name (e.g., www.cloudshift.com). The Site Reliability team needs to configure DNS entries in Amazon Route 53 to direct traffic to the NLB while minimizing ongoing DNS query costs.

The Requirement:
#

Determine the MOST cost-effective and operationally sound Route 53 configuration to map the company domain name to the NLB.

The Options
#

  • A) Create a Route 53 AAAA record pointing to the NLB.
  • B) Create a Route 53 alias record pointing to the NLB.
  • C) Create a Route 53 CAA record pointing to the NLB.
  • D) Create a Route 53 CNAME record pointing to the NLB.

Google adsense
#

leave a comment:

Correct Answer
#

B) Create a Route 53 alias record pointing to the NLB.

Quick Insight: The Site Reliability Imperative
#

  • When routing to AWS resources like Network Load Balancers, Route 53 alias records provide a native integration that routes traffic efficiently and without extra DNS query charges.
  • CNAME records introduce additional DNS lookups and incur costs, while CAA records are unrelated to routing.
  • AAAA records specify IPv6 addresses directly, but NLBs don’t offer fixed IP addresses to reference manually.

Content Locked: The Expert Analysis
#

You’ve identified the answer. But do you know the implementation details that separate a Junior from a Senior?


The Expert’s Analysis
#

Correct Answer
#

Option B: Create a Route 53 alias record pointing to the NLB.

The Winning Logic
#

  • Route 53 alias records are a Route 53-specific feature that lets you map your domain name directly to AWS resources such as NLBs, ALBs, S3 buckets, and CloudFront distributions.
  • Alias records are served from authoritative Route 53 DNS servers and do not incur additional DNS query charges unlike CNAME or standard records.
  • NLBs don’t have fixed IP addresses that you can hardcode into an A or AAAA record. Therefore, aliasing the NLB target DNS name allows Route 53 to resolve the changing IP addresses transparently.
  • Alias records support zone apex (naked domain) routing, unlike CNAME records which cannot be used at the root domain.
  • Using an alias record improves DNS resolution latency and reduces cost for high query volumes.

The Trap (Distractor Analysis):
#

  • Why not A (AAAA record)?
    NLB IP addresses are dynamic and not static fixed IPs you can point an AAAA record to. Also, this only covers IPv6, missing IPv4 users.

  • Why not C (CAA record)?
    CAA records are Certificate Authority Authorization records used for restricting which CAs can issue certificates for a domain—not for routing traffic.

  • Why not D (CNAME record)?
    CNAME records introduce an extra DNS lookup, cannot be used at the zone apex (root domain), and incur DNS query costs. They are less cost-efficient and operationally less ideal than alias records for AWS resources.


The Technical Blueprint
#

# Example CLI command to **create an alias record** in Route 53 pointing to a Network Load Balancer
aws route53 change-resource-record-sets --hosted-zone-id Z3AADJGX6KTTL2 --change-batch '{
  "Changes": [{
    "Action": "UPSERT",
    "ResourceRecordSet": {
      "Name": "www.cloudshift.com",
      "Type": "A",
      "AliasTarget": {
        "HostedZoneId": "Z26RNL4JYFTOTI",  # NLB Hosted Zone ID (varies per region)
        "DNSName": "my-nlb-1234567890.us-east-1.elb.amazonaws.com",
        "EvaluateTargetHealth": false
      }
    }
  }]
}'

The Comparative Analysis
#

Option Operational Overhead Automation Level Impact
A (AAAA record) High - must manage IP changes manually Low Not supported for NLB (dynamic IPs)
B (Alias record) Low - Managed by Route 53 High Native AWS integration, lowest cost & latency
C (CAA record) None - unrelated to routing N/A Not for traffic routing
D (CNAME record) Medium - requires extra DNS lookup Medium Causes extra latency and higher DNS query cost

Real-World Application (Practitioner Insight)
#

Exam Rule
#

“For the exam, always pick Route 53 Alias records when routing domain names to AWS resources such as NLBs.”

Real World
#

“In production, alias records significantly simplify DNS management by automating updates to IP addresses behind the scenes and eliminating query charges.”


(CTA) Stop Guessing, Start Mastering
#


Disclaimer

This is a study note based on simulated scenarios for the SOA-C02 exam.

The DevPro Network: Mission and Founder

A 21-Year Tech Leadership Journey

Jeff Taakey has driven complex systems for over two decades, serving in pivotal roles as an Architect, Technical Director, and startup Co-founder/CTO.

He holds both an MBA degree and a Computer Science Master's degree from an English-speaking university in Hong Kong. His expertise is further backed by multiple international certifications including TOGAF, PMP, ITIL, and AWS SAA.

His experience spans diverse sectors and includes leading large, multidisciplinary teams (up to 86 people). He has also served as a Development Team Lead while cooperating with global teams spanning North America, Europe, and Asia-Pacific. He has spearheaded the design of an industry cloud platform. This work was often conducted within global Fortune 500 environments like IBM, Citi and Panasonic.

Following a recent Master’s degree from an English-speaking university in Hong Kong, he launched this platform to share advanced, practical technical knowledge with the global developer community.


About This Site: AWS.CertDevPro.com


AWS.CertDevPro.com focuses exclusively on mastering the Amazon Web Services ecosystem. We transform raw practice questions into strategic Decision Matrices. Led by Jeff Taakey (MBA & 21-year veteran of IBM/Citi), we provide the exclusive SAA and SAP Master Packs designed to move your cloud expertise from certification-ready to project-ready.