We have an AWS VPC set up and have set up Active Directory services to connect to our local domain controller.
When we launch instances, we get amazons DNS server for our VPC, and we can access all amazon domain resources.
We cannot join the server to our domain unless we change the DNS to the IP addresses of our DC in another offic (connected through direct connect)
If we add both DNS servers (amazon and our remote DC) we can only resolve the highest priority
We need servers to be able to access amazons DNS to access Amazon DNS names for s3 and other things, we need active directory to use AD accounts.
One other issue we have is our domain name is also the same as our external website . It seems the amazon VPC's DNS is trying to resolve AD requests to the external IP address of the website instead of trying to access the remote AD on another network.
AT this time we are not able to create a DC on amazon, due to the fact we do not have an active directory with an R2 extension (a requirement for all builds in AWS windows servers)