AzPolicyAdvertizer

last sync: 2025-Aug-14 17:22:46 UTC

Prevent Deletion of Private DNS Zone

Community Policy definition

Source

Repository Community-Policy GitHub
JSON Community-Policy GitHub

Deploy policy 3f83c643-7c61-47f0-9717-47fa562d9fa3 (1.0.0) to Azure

Display name

Prevent Deletion of Private DNS Zone

3f83c643-7c61-47f0-9717-47fa562d9fa3

Version

1.0.0
Details on versioning

Category

Network
Microsoft Learn

Description

This policy prevents the deletion of private DNS zones while still allowing the child record sets and records to be deleted.

Mode

Indexed

Type

Custom Community

Effect

Default
DenyAction
Allowed
DenyAction, Disabled

RBAC role(s)

none

Rule aliases

Rule resource types

IF (1)
Microsoft.Network/privateDnsZones

JSON

EPAC

{6 itemsdisplayName: "Prevent Deletion of Private DNS Zone",
description: "This policy prevents the deletion of private DNS zones while still allowing the child record sets and records to be deleted.",
metadata: {2 itemsversion: "1.0.0",
category: "Network"
},
mode: "Indexed",
parameters: {1 itemeffect: {4 itemstype: "String",
metadata: {2 itemsdisplayName: "Effect",
description: "DenyAction or Disabled the execution of the Policy"
},
allowedValues: [2 items"DenyAction",
"Disabled"
],
defaultValue: "DenyAction"
}
},
policyRule: {2 itemsif: {1 itemallOf: [1 item{2 itemsfield: "type",
equals: "Microsoft.Network/privateDnsZones"
}
]
},
then: {2 itemseffect: "[parameters('effect')]",
details: {2 itemsactionNames: [1 item"delete"
],
cascadeBehaviors: {1 itemresourceGroup: "deny"
}
}
}
}
}