Also my workplace hosts their own dns

The best way to control the data.

and I think it will be a cold day in hell before they let me do automated updates.

This is of waning value, but don’t jump into half-assed automation early or you end up with problems like route53 hijacking.