[Policy]: Configure databases to use private DNS zones

[Nadia-hansen]

Policy Definition or Initiative

Definition

Built-in/Custom

Built-in

Built-in policy definition or initiative ID

Custom policy definition or initiative description

A policy that Configure Azure PaaS services to use private DNS zones for databases. There is missing a policy for privatelink.database.windows.net

Scope

Intermediate Root

Default Assignment

• Yes

Comments/thoughts

No response

[Springstone]

@Nadia-hansen thanks for reporting. Unfortunately, there are no built-in policies available to configure database Private DNS Zones at this time. We have taken the strategic decision to use built-in policies only - we no longer create custom policies as the overhead is high on our small team. Thank you for your understanding.

[MikaelJcSoderberg]

What Enterprise-Scale do provide is a Generic policy definition that you should be able to use for SQL

https://github.com/Azure/Enterprise-Scale/blob/main/src/resources/Microsoft.Authorization/policyDefinitions/Deploy-Private-DNS-Generic.json

[matt-FFFFFF]

Closing as response provided