services / Azure / Private DNS CNAME record set

A CNAME record set aliases an internal hostname to a canonical name within an Azure Private DNS zone, used for name resolution inside linked virtual networks.

Private (internal) records, not public-facing; supports a single organizational network function.

Microsoft.​Network/​privateDnsZones/​CNAME/​delete

Deleting the record set removes the internal alias resolution, breaking connectivity to the aliased service (DoS within the VNet).

Risks

1. Denial-of-service (HIGH)
2. Network destruction (HIGH)

Scope: HIGH

This privilege may grant access to sensitive data from a single organizational function, or allow interruption of a service supporting a single organizational function.

Links