services / Azure / Private DNS AAAA record set

An AAAA record set maps internal hostnames to IPv6 addresses within an Azure Private DNS zone, used for name resolution inside linked virtual networks.

Private (internal) records, not public-facing; supports a single organizational network function.

Microsoft.​Network/​privateDnsZones/​AAAA/​delete

Deleting the record set removes IPv6 name resolution for the host, breaking connectivity to the service it fronts (DoS within the VNet).

Risks

1. Denial-of-service (HIGH)
2. Network destruction (HIGH)

Scope: HIGH

This privilege may grant access to sensitive data from a single organizational function, or allow interruption of a service supporting a single organizational function.

Links