Yes. I use hosted zones in Route53 to do this automation and use iam to limit access to that one zone.