AzPolicyAdvertizer

last sync: 2025-Sep-18 17:23:10 UTC

Deploy - Configure Azure Event Grid domains to use private DNS zones

Azure BuiltIn Policy definition

Source

Azure Portal

Display name

Deploy - Configure Azure Event Grid domains to use private DNS zones

d389df0a-e0d7-4607-833c-75a6fdac2c2d

Version

1.1.0
Details on versioning

Versioning

Versions supported for Versioning: 1
1.1.0
Built-in Versioning [Preview]

Category

Event Grid
Microsoft Learn

Description

Use private DNS zones to override the DNS resolution for a private endpoint. Learn more at: https://aka.ms/privatednszone.

Cloud environments

AzureCloud = true
AzureUSGovernment = unknown
AzureChinaCloud = unknown

Available in AzUSGov

Unknown, no evidence if Policy definition is/not available in AzureUSGovernment

Mode

Indexed

Type

BuiltIn

Preview

False

Deprecated

False

Effect

Default
DeployIfNotExists
Allowed
deployIfNotExists, DeployIfNotExists, Disabled

RBAC role(s)

Role Name	Role Id
Network Contributor	4d97b98b-1d4f-4787-a291-c67834d212e7

Rule aliases

IF (1)

Alias	Namespace	ResourceType	Path	PathIsDefault	DefaultPath	Modifiable
Microsoft.Network/privateEndpoints/privateLinkServiceConnections[].groupIds[]	Microsoft.Network	privateEndpoints	properties.privateLinkServiceConnections[].properties.groupIds[]	True		False

Rule resource types

IF (1)

Microsoft.Network/privateEndpoints

THEN-Deployment (1)

Microsoft.Network/privateEndpoints/privateDnsZoneGroups

Compliance

Not a Compliance control

Initiatives usage

Rows: 1-1 / 1
Records:
Use the filters above each column to filter and limit table data. Advanced searches can be performed by using the following operators:
<, <=, >, >=, =, *, !, {, }, ||,&&, **[empty]**, **[nonempty]**, **rgx:**
Learn more
TableFilter v0.7.3
https://www.tablefilter.com/
©2015-2025 Max Guglielmi
Close
?
Page of 1
Initiative DisplayName	Initiative Id	Initiative Category	State	Type	polSet in AzUSGov

Configure Azure PaaS services to use private DNS zones	Deploy-Private-DNS-Zones	Network	GA	ALZ

History

Date/Time (UTC ymd) (i)	Change type	Change detail
2022-04-01 20:29:14	change	Minor (1.0.0 > 1.1.0)
2021-02-17 14:28:42	add	d389df0a-e0d7-4607-833c-75a6fdac2c2d

JSON compare

compare mode: version left: version right:

1.0.0 → 1.1.0 RENAMED Viewed

@@ -3,9 +3,9 @@
     "policyType": "BuiltIn",
     "mode": "Indexed",
     "description": "Use private DNS zones to override the DNS resolution for a private endpoint. Learn more at: https://aka.ms/privatednszone.",
     "metadata": {
-        "version": "1.0.0",
         "category": "Event Grid"
     },
     "parameters": {
         "privateDnsZoneId": {
@@ -23,11 +23,12 @@
                 "description": "Enable or disable the execution of the policy"
             },
             "allowedValues": [
                 "deployIfNotExists",
                 "Disabled"
             ],
-            "defaultValue": "deployIfNotExists"
         }
     },
     "policyRule": {
         "if": {

     "policyType": "BuiltIn",
     "mode": "Indexed",
     "description": "Use private DNS zones to override the DNS resolution for a private endpoint. Learn more at: https://aka.ms/privatednszone.",
     "metadata": {
+        "version": "1.1.0",
         "category": "Event Grid"
     },
     "parameters": {
         "privateDnsZoneId": {
                 "description": "Enable or disable the execution of the policy"
             },
             "allowedValues": [
                 "deployIfNotExists",
+                "DeployIfNotExists",
                 "Disabled"
             ],
+            "defaultValue": "DeployIfNotExists"
         }
     },
     "policyRule": {
         "if": {

JSON

api-version=2021-06-01
EPAC

{7 itemsdisplayName: "Deploy - Configure Azure Event Grid domains to use private DNS zones",
policyType: "BuiltIn",
mode: "Indexed",
description: "Use private DNS zones to override the DNS resolution for a private endpoint. Learn more at: https://aka.ms/privatednszone.",
metadata: {2 itemsversion: "1.1.0",
category: "Event Grid"
},
parameters: {2 itemsprivateDnsZoneId: {2 itemstype: "String",
metadata: {3 itemsdisplayName: "Private DNS Zone ID",
description: "Specifies the private DNS zone to use to configure private endpoint",
strongType: "Microsoft.Network/privateDnsZones"
}
},
effect: {4 itemstype: "String",
metadata: {2 itemsdisplayName: "Effect",
description: "Enable or disable the execution of the policy"
},
allowedValues: [3 items"deployIfNotExists",
"DeployIfNotExists",
"Disabled"
],
defaultValue: "DeployIfNotExists"
}
},
policyRule: {2 itemsif: {1 itemallOf: [2 items{2 itemsfield: "type",
equals: "Microsoft.Network/privateEndpoints"
},
{2 itemscount: {2 itemsfield: "Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]",
where: {2 itemsfield: "Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]",
equals: "domain"
}
},
greaterOrEquals: 1
}
]
},
then: {2 itemseffect: "[parameters('effect')]",
details: {3 itemstype: "Microsoft.Network/privateEndpoints/privateDnsZoneGroups",
roleDefinitionIds: [1 item"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7" Network Contributor 
],
deployment: {1 itemproperties: {3 itemsmode: "incremental",
template: {4 items$schema: "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
contentVersion: "1.0.0.0",
parameters: {3 itemsprivateDnsZoneId: {1 itemtype: "string"
},
privateEndpointName: {1 itemtype: "string"
},
location: {1 itemtype: "string"
}
},
resources: [1 item{5 itemsname: 🔍"[
    concat(
        parameters('privateEndpointName'),
       '/deployedByPolicy'
    )
]",
type: "Microsoft.Network/privateEndpoints/privateDnsZoneGroups",
apiVersion: "2020-03-01",
location: "[parameters('location')]",
properties: {1 itemprivateDnsZoneConfigs: [1 item{2 itemsname: "domain-privateDnsZone",
properties: {1 itemprivateDnsZoneId: "[parameters('privateDnsZoneId')]"
}
}
]
}
}
]
},
parameters: {3 itemsprivateDnsZoneId: {1 itemvalue: "[parameters('privateDnsZoneId')]"
},
privateEndpointName: {1 itemvalue: "[field('name')]"
},
location: {1 itemvalue: "[field('location')]"
}
}
}
}
}
}
}
}

Deploy - Configure Azure Event Grid domains to use private DNS zones

Azure BuiltIn Policy definition

TableFilter v0.7.3