Skip to content

Commit

Permalink
Updated longDescription for Protect private DNS zones and records
Browse files Browse the repository at this point in the history
  • Loading branch information
ehaslett committed Aug 30, 2024
1 parent e7e3ec4 commit 4088684
Showing 1 changed file with 1 addition and 1 deletion.
Original file line number Diff line number Diff line change
Expand Up @@ -6,7 +6,7 @@
recommendationResourceType: Microsoft.Network/privateDnsZones
recommendationMetadataState: Active
longDescription: |
Private DNS zones and records are critical and their deletion can cause service outages. To protect against unauthorized or accidental changes, the Private DNS Zone Contributor role, a built-in role for managing these resources, should be assigned to specific users or groups. Then, at a minimum, restrict access by only granting Private DNS Zone Contributor permission to all zones.
Private DNS zones and records are critical and their deletion can cause service outages. To protect against unauthorized or accidental changes, the Private DNS Zone Contributor role, a built-in role for managing these resources, should be assigned to specific users or groups. Restrict access by granting Private DNS Zone Contributor permission to all zones, and assigning Private DNS Zone Contributor to the entities that need to manage the zones.
potentialBenefits: Prevents DNS outages
pgVerified: true
publishedToLearn: false
Expand Down

0 comments on commit 4088684

Please sign in to comment.