@jrgm: I've seen various hostnames like login.dev.anosrep.org so I'm guessing that won't work here since you'd just lop off the first sub-sub-domain and end up with dev.anosrep.org - which isn't a zone in Route53 (anosrep.org is). Therefore, I don't think this will work here.