I couldn't get it to work the other way, so I changed it to private ip, even after enabling vpc hostname resolution.  This was one of the things I wanted to cleanup before making a PR to master.