Yes, I would not disclose the "internal" AWS hostname. You should also avoid setting a single IP address. In AWS, IP addresses can quickly change and redirect to other users.
The solution is to really use your own domain name that you manage, but use a CNAME DNS record.
iot-ingestion.domain-i-own.com CNAME A26PKG2U6WRS2I.iot.eu-west-1.amazonaws.com.
It may even be worth baking different host names in different versions of the deviceโs firmware, so if there is a problem with one, you can redirect it to another endpoint or completely disable it if it damages your services.
I had good experience using Route 53, Amazon DNS. It can also result in fewer DNS queries from your device to get the full IP address.
source share