services / Azure / Private DNS A record set

An A record set maps internal hostnames to IPv4 addresses within an Azure Private DNS zone, used for name resolution inside linked virtual networks.

Private (internal) records, not public-facing; supports a single organizational network function.

Microsoft.​Network/​privateDnsZones/​A/​delete

Deleting the record set removes name resolution for the host, breaking connectivity to the service it fronts (DoS within the VNet).

Risks

1. Denial-of-service (HIGH)
2. Network destruction (HIGH)

Scope: HIGH

This privilege may grant access to sensitive data from a single organizational function, or allow interruption of a service supporting a single organizational function.

Links