Acme Bank's mobile app team is migrating applications to EC2 in a VPC while keeping backend services on-premises, requiring DNS resolution to the on-premises Active Directory via Direct Connect. Which solution enables this DNS resolution with the LEAST administrative overhead?