Evolving such an infrastructure is incredibly painful. Want to move to a zero-trust security model? How about migrating only some services to a different provid

Evolving such an infrastructure is incredibly painful. Want to move to a zero-trust security model? How about migrating only some services to a different provider? Set it up right from the start with a domain name you control (or one that is reserved for private use in an RFC). You can still use internal DNS if you want the additional layer of obscurity.