Domain name resolution at the edge (BP3) - AWS Best Practices for DDoS Resiliency