AzPolicyAdvertizer

last sync: 2025-Jul-15 17:24:34 UTC

Configure private DNS Zones for an Azure Data Explorer cluster groupID

Community Policy definition

Source Repository Community-Policy GitHub
JSON Community-Policy GitHub
Deploy policy 85e69e4d-9953-49b9-b864-dcddea977455 (1.0.0) to Azure
Display name Configure private DNS Zones for an Azure Data Explorer cluster groupID
Id 85e69e4d-9953-49b9-b864-dcddea977455
Version 1.0.0
Details on versioning
Category Azure Data Explorer
Microsoft Learn
Description Configure private DNS zone group to override the DNS resolution for Azure Data Explorer 'cluster' groupID private endpoint.
Mode Indexed
Type Custom Community
Effect Default
DeployIfNotExists
Allowed
DeployIfNotExists, AuditIfNotExists, Disabled
RBAC role(s)
Role Name Role Id
Network Contributor 4d97b98b-1d4f-4787-a291-c67834d212e7
Reader acdd72a7-3385-48ef-bd42-f606fba81ae7
Rule aliases IF (3)
Alias Namespace ResourceType Path PathIsDefault DefaultPath Modifiable
Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*] Microsoft.Network privateEndpoints properties.privateLinkServiceConnections[*] True False
Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*] Microsoft.Network privateEndpoints properties.privateLinkServiceConnections[*].properties.groupIds[*] True False
Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].privateLinkServiceId Microsoft.Network privateEndpoints properties.privateLinkServiceConnections[*].properties.privateLinkServiceId True False
Rule resource types IF (2)
Microsoft.Kusto/clusters
Microsoft.Network/privateEndpoints
THEN-Deployment (1)
Microsoft.Network/privateEndpoints/privateDnsZoneGroups
JSON
EPAC
Deploy policy 85e69e4d-9953-49b9-b864-dcddea977455 (1.0.0) to Azure