A windows machine in one VPC needs to join the AD domain in another VPC. VPC Peering has been established. But the domain join is not working. What is the other step that needs to be followed to ensure that the AD domain join can work as intended?

Answer options:

A.Change the VPC peering connection to a VPN connection.
B.Change the VPC peering connection to a Direct Connect connection.
C.Ensure the security groups for AD hosted instance has the right rules for relevant instances.
D.Ensure that the AD is placed in a public subnet.

Answer – C
In addition to VPC peering and setting the right route tables, the security groups for the AD EC2 instance need to ensure that the right rules are put in place for allowing incoming traffic.
Options Aand B are invalid because changing the connection type will not help. This is a problem with the Security Groups.
Option D is invalid since the AD should not be placed in a public subnet.
For more information on allowing ingress traffic for AD, please visit the following URL
https://docs.aws.amazon.com/quickstart/latest/active-directory-ds/ingress.html