If the DNS server for your on-premises domain uses a publiclyaddressable IP address, you must add a CIDR address block to correctlyroute traffic to and from your Microsoft AD on Amazon Web Services.Show details from next link. https://docs.aws.amazon.com/ja_jp/cli/latest/reference/ds/add-ip-routes.html