Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Feature Request: Update Policy Definition Deploy-Private-DNS-Generic to expose location as parameter #1699

Closed
jtracey93 opened this issue Jul 3, 2024 · 1 comment
Assignees
Labels
Area: Policy 📝 Issues / PR's related to Policy Area: Private Link/DNS

Comments

@jtracey93
Copy link
Collaborator

As requested in https://github.com/MicrosoftDocs/cloud-adoption-framework/issues/1103 (no longer accessible due to issues in the repo being disabled)

"
If using RSV for Azure Backup in multiple regions, there is no check to ensure that the DNS records is created in the correct Private DNS zone. If two or more policies are assigned using the same SubResource/GroupId then DNS records will be created randomly in the different private DNS zones, e.g. in privatelink.we.backup.windowsazure.com and in privatelink.sdc.backup.windowsazure.com.

If an additional check is added on location for the private endpoint itself in the policy, then it works. See example here:
https://github.com/norregaard/Azure/blob/main/Policy/Auto-create-DNS-record-private-DNS-zone.json now https://github.com/norregaard/Azure/blob/main/Policy/Auto-create-DNS-record-private-DNS-zone-w-location.json
"

We should update the Policy Definition Deploy-Private-DNS-Generic to expose location as parameter that customers can use to help control this scenario.

cc: @Springstone

@Springstone
Copy link
Member

This has been merged, and is live.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Area: Policy 📝 Issues / PR's related to Policy Area: Private Link/DNS
Projects
None yet
Development

No branches or pull requests

2 participants