That might work but if your Samsung example is behind cloudflare, you're basically going to have to block any and all access to cloudflare's Network.

And if telemetry.example-iot.com belongs to an AWS IP, it could change to another IP in their space at any time so your only recourse would be to limit connectivity to all of AWS which would effectively prevent you from accessing most things on the internet