Route53 A record does not point to a dangling IP address

# Terraform: convert A record to Alias to avoid dangling public IPs
resource "aws_route53_record" "<example_resource_name>" {
  zone_id = "<example_resource_id>"
  name    = "<example_resource_name>"
  type    = "A"

  alias {                                  # CRITICAL: Alias to AWS resource (no direct IP)
    name                   = "<ALIAS_TARGET_DNS_NAME>"   # e.g., dualstack.<alb>.amazonaws.com
    zone_id                = "<ALIAS_TARGET_HOSTED_ZONE_ID>"
    evaluate_target_health = false
  }
}

# CloudFormation: convert A record to an Alias so it no longer points to a dangling IP
Resources:
  <example_resource_name>:
    Type: AWS::Route53::RecordSet
    Properties:
      HostedZoneId: <example_resource_id>
      Name: <example_resource_name>
      Type: A
      AliasTarget:
        HostedZoneId: <ALIAS_TARGET_HOSTED_ZONE_ID>  # CRITICAL: use Alias to an AWS resource instead of an IP
        DNSName: <ALIAS_TARGET_DNS_NAME>             # CRITICAL: target AWS resource DNS (e.g., ALB/CloudFront)
        EvaluateTargetHealth: false