Azure Public DNS Zone & Records

azure-dns-zone

Azure public DNS zone (azurerm_dns_zone) plus a clean, map-driven set of record sets — A, AAAA, CNAME, TXT, MX, NS, CAA and SRV. Works with Terraform and OpenTofu (>= 1.6), azurerm provider >= 4.0, < 5.0. The module consumes an existing resource group (DNS zones are global, so there is no location to set).

Each record type maps to its own azurerm resource via for_each, so addressing is stable and editing one entry never churns the others. The fiddly Azure-isms are handled or documented for you:

• Record names are relative to the zone — use "@" (the default) for the apex or a label like "www"; never a full FQDN.
• TXT values are verbatim — no escaped quoting; Azure handles the 255-char segmentation (this differs from Route 53).
• CNAME-at-apex and apex-NS overrides are rejected at plan time (DNS forbids the former; Azure manages the latter).

Requirements

Requirement	Version
Terraform / OpenTofu	>= 1.6
hashicorp/azurerm	>= 4.0, < 5.0

Verification

Static-validated (fmt, validate, tflint, checkov). A live-test fixture is provided under tests/ (throwaway public zone + A/TXT/CAA records, applied and destroyed immediately — Azure bills public DNS zones at ~$0.50/month prorated, so a same-session apply→verify→destroy costs a fraction of a cent). See catalog status.

License

Commercial — IaC Bazaar EULA. © IaC Bazaar. Original work (not derived from a third-party module).