use public DNS names with a VPC