[res0nat0r]

Your VPC has a DNS server at .2 of your VPC CIDR block that is mounted via loopback on the dom0 and exposed to your VPC to let you do lookups via their DNS infra.

https://aws.amazon.com/premiumsupport/knowledge-center/vpc-e...