Allow agent acces via DNS-Name
At the moment, it is not possible to use a DNS name in the agent access rule. This would be useful, for example, if you change the IP address of the CMK server (new server / backup restore) or if you use NAT addresses in different network segments and need to adjust those IPs.
At the moment, you have to add the new IP address to the rule before changing it, then bake and sign the agents, wait, and afterwards remove the old IP entry - and then bake and sign again.
With DNS (alias), you can simply change the DNS entry without touching the rule or the CMK configuration.