Azure Private DNS Zone

azure-private-dns

Azure Private DNS zone with virtual-network links and optional record sets — private name resolution for VNets, Private Endpoints and split-horizon internal domains, done right. The module is self-contained: by default it creates its own resource group and a virtual network, the private DNS zone, the zone⇄VNet link, and any A/CNAME records you declare. One tofu apply yields a resolvable private zone; tofu destroy removes everything (including the resource group).

Secure by default: private DNS zones are inherently private (resolvable only from linked VNets, never the public internet), and VM auto-registration (registration_enabled) is off unless you opt in per link. Works with Terraform and OpenTofu (>= 1.6), azurerm provider >= 4.0, < 5.0.

Requirements

Requirement	Version
Terraform / OpenTofu	>= 1.6
hashicorp/azurerm	>= 4.0, < 5.0

Verification

Static-validated (fmt, validate, tflint, checkov). Live apply/destroy testing runs the self-contained root against a real subscription (tests/live.tfvars + tests/provider.tf, with tests/verify.sh asserting the zone and link IDs).

License

Commercial — IaC Bazaar EULA. © IaC Bazaar. Original work (not derived from a third-party module).