shared-modules/dns/allPrivateDnsZones.jsonc (118 lines of code) (raw):
/* From https://learn.microsoft.com/azure/private-link/private-endpoint-dns#azure-services-dns-zone-configuration */
/*
* Missing:
* - SQL Managed Instance: requires knowing the DNS prefix of the SQL MI.
* - Azure Batch, AKS, ACR, Recovery Services Vaults, Azure File Sync, ADX: requires knowing the region.
TODO: Add region placeholder for these zones and dynamically replace at runtime (per ALZ model).
* - Static Web Apps: Requires knowing the partition ID.
TODO: See ALZ approach.
*/
{
"AzureCloud": [
"privatelink.azure-automation.net",
"privatelink.database.windows.net",
"privatelink.sql.azuresynapse.net",
"privatelink.dev.azuresynapse.net",
"privatelink.azuresynapse.net",
"privatelink.blob.core.windows.net",
"privatelink.table.core.windows.net",
"privatelink.queue.core.windows.net",
"privatelink.file.core.windows.net",
"privatelink.web.core.windows.net",
"privatelink.dfs.core.windows.net",
"privatelink.documents.azure.com",
"privatelink.mongo.cosmos.azure.com",
"privatelink.cassandra.cosmos.azure.com",
"privatelink.gremlin.cosmos.azure.com",
"privatelink.table.cosmos.azure.com",
"privatelink.postgres.cosmos.azure.com",
"privatelink.postgres.database.azure.com",
"privatelink.mysql.database.azure.com",
"privatelink.mariadb.database.azure.com",
"privatelink.vaultcore.azure.net",
"privatelink.managedhsm.azure.net",
"privatelink.search.windows.net",
"privatelink.azurecr.io",
"privatelink.azconfig.io",
"privatelink.siterecovery.windowsazure.com",
"privatelink.servicebus.windows.net",
"privatelink.azure-devices.net",
"privatelink.azure-devices-provisioning.net",
"privatelink.eventgrid.azure.net",
"privatelink.azurewebsites.net",
"scm.privatelink.azurewebsites.net",
"privatelink.api.azureml.ms",
"privatelink.notebooks.azure.net",
"privatelink.service.signalr.net",
"privatelink.monitor.azure.com",
"privatelink.oms.opinsights.azure.com",
"privatelink.ods.opinsights.azure.com",
"privatelink.agentsvc.azure-automation.net",
"privatelink.cognitiveservices.azure.com",
"privatelink.openai.azure.com",
"privatelink.datafactory.azure.net",
// This one is for the Azure Data Factory portal and there should only be one endpoint as it is a shared FQDN for all ADF instances.
"privatelink.adf.azure.com",
"privatelink.redis.cache.windows.net",
"privatelink.redisenterprise.cache.azure.net",
"privatelink.purview.azure.com",
"privatelink.purviewstudio.azure.com",
"privatelink.digitaltwins.azure.net",
"privatelink.azurehdinsight.net",
"privatelink.his.arc.azure.com",
"privatelink.guestconfiguration.azure.com",
"privatelink.dp.kubernetesconfiguration.azure.com",
"privatelink.media.azure.net",
"privatelink.azurestaticapps.net",
"privatelink.prod.migration.windowsazure.com",
"privatelink.azure-api.net",
"privatelink.analysis.windows.net",
"privatelink.pbidedicated.windows.net",
"privatelink.tip1.powerquery.microsoft.com",
"privatelink.directline.botframework.com",
"privatelink.token.botframework.com",
"privatelink.workspace.azurehealthcareapis.com",
"privatelink.fhir.azurehealthcareapis.com",
"privatelink.dicom.azurehealthcareapis.com",
"privatelink.azuredatabricks.net",
"privatelink-global.wvd.microsoft.com",
"privatelink.wvd.microsoft.com",
"privatelink.azure.com"
],
"AzureUSGovernment": [
"privatelink.azure-automation.us",
"privatelink.database.usgovcloudapi.net",
"privatelink.blob.core.usgovcloudapi.net",
"privatelink.table.core.usgovcloudapi.net",
"privatelink.queue.core.usgovcloudapi.net",
"privatelink.file.core.usgovcloudapi.net",
"privatelink.web.core.usgovcloudapi.net",
"privatelink.documents.azure.us",
"privatelink.batch.usgovcloudapi.net",
"privatelink.postgres.database.usgovcloudapi.net",
"privatelink.mysql.database.usgovcloudapi.net",
"privatelink.mariadb.database.usgovcloudapi.net",
"privatelink.vaultcore.usgovcloudapi.net",
"privatelink.search.windows.us",
"privatelink.azconfig.azure.us",
"privatelink.siterecovery.windowsazure.us",
"privatelink.servicebus.usgovcloudapi.net",
"privatelink.azure-devices.us",
"privatelink.servicebus.windows.us",
"privatelink.azure-devices-provisioning.us",
"privatelink.azurewebsites.us",
"scm.privatelink.azurewebsites.us",
"privatelink.monitor.azure.us",
"privatelink.adx.monitor.azure.us",
"privatelink.oms.opinsights.azure.us",
"privatelink.ods.opinsights.azure.us",
"privatelink.agentsvc.azure-automation.us",
"privatelink.cognitiveservices.azure.us",
"privatelink.redis.cache.usgovcloudapi.net",
"privatelink.azurehdinsight.us",
"privatelink.api.ml.azure.us",
"privatelink.notebooks.usgovcloudapi.net",
"privatelink-global.wvd.azure.us",
"privatelink.wvd.azure.us"
]
}