Setting up hostname domain certificates in AWS private hosted zone

Question

I am provisioning a 3-broker kafka cluster on AWS EC2, and I need them to be reachable on an internal VPC at URLs like 1.kafka.private.com, etc. If I do not attach