I have integrated my AWS ECS services with AWS Cloud Map. These services are running on Fargate and are located in a private subnet. The application uses an AWS Application Load Balancer (ALB) to call these services. I want to access the services using an SSH tunnel via a jump server (bastion host).

What I’ve Done:

dig service-name.namespace

Issues: DNS resolution for Cloud Map service names fails with Temporary failure in name resolution. Using dig or nslookup for the Cloud Map DNS name results in SERVFAIL.

Questions: How can I ensure that the Cloud Map DNS names are resolved correctly from my local machine via the SSH tunnel? Is there an alternative approach to accessing these services without modifying system DNS settings or hosts files?

Any guidance or alternative solutions would be greatly appreciated!