services / Azure / Azure SQL Managed Instance DNS alias

A friendly, CNAME-style DNS name that maps to an Azure SQL Managed Instance endpoint, allowing clients to connect using a stable alias rather than the instance's native hostname.

Controlling an alias controls where client connection traffic for a database endpoint resolves; aliases can be transferred (acquired) between instances.

Microsoft.​Sql/​managedInstances/​dnsAliases/​delete

Deleting a DNS alias removes the connection endpoint name clients depend on, breaking name resolution to the managed instance and denying service to dependent applications.

Risks

1. Denial-of-service (HIGH)
2. Network destruction (HIGH)

Scope: HIGH

This privilege may grant access to sensitive data from a single organizational function, or allow interruption of a service supporting a single organizational function.

Links