Resolve only some DNS domains

[AntoineAugusti]

Implement https://aws.amazon.com/blogs/aws/how-to-get-started-with-amazon-route-53-resolver-dns-firewall-for-amazon-vpc/ to only resolve some domains from our VPC

Look at hashicorp/terraform-provider-aws#18520