To do any ops work on our servers, we first need to ssh into a DMZ server with a public IP, before ssh-ing on to the app servers, with ips such as 172.16.3.239. I would rather have memorable hostnames, to do something like ssh app.staging
, but I am unsure how this works on AWS. I have only setup DNS for globally accessible ips with my registrar, and since the AWS private subnet is for a private range of addresses, this will not work, of course.
I am also sure if I can use any random hostname (that does not clash with a "real" public hostname), or if it would need to resolve to something that would be globally unique (outside of my private subnet).
Two options are: