Several VPCs must resolve the corporate suffix corp.example through on-premises DNS. The company wants centrally managed forwarding configuration. Which design is most suitable?

1. Create only an inbound endpoint and enable all VPCs to send queries through it.
2. Create identical public zones for corp.example in every account.
3. Use a Resolver outbound endpoint and share conditional forwarding rules with AWS RAM.
4. Use one Route 53 latency record to select the corporate DNS server for all suffixes.