private DNS zone

term

cloud

DNS names that resolve only inside your VPCs - internal service names invisible to the public internet.

Split-horizon as a managed service: the same name can answer differently inside and out.