Catalog
MicrosoftDocs/azure-dns

MicrosoftDocs

azure-dns

Expert knowledge for Azure DNS development including decision making, architecture & design patterns, limits & quotas, security, configuration, and integrations & coding patterns. Use when managing DNS zones/records, DNSSEC, Private DNS/resolvers, reverse DNS, or migrating legacy Private DNS, and other Azure DNS related development tasks. Not for Azure Traffic Manager (use azure-traffic-manager), Azure Front Door (use azure-front-door), Azure Virtual Network (use azure-virtual-network), Azure Private Link (use azure-private-link).

v1.0Latest
New~1.8kUpdated Jun 26, 2026

Azure DNS Skill

This skill provides expert guidance for Azure DNS. Covers decision making, architecture & design patterns, limits & quotas, security, configuration, and integrations & coding patterns. It combines local quick-reference content with remote documentation fetching capabilities.

How to Use This Skill

IMPORTANT for Agent: Use the Category Index below to locate relevant sections. For categories with line ranges (e.g., L35-L120), use read_file with the specified lines. For categories with file links (e.g., [security.md](security.md)), use read_file on the linked reference file

IMPORTANT for Agent: If metadata.generated_at is more than 3 months old, suggest the user pull the latest version from the repository. If mcp_microsoftdocs tools are not available, suggest the user install it: Installation Guide

This skill requires network access to fetch documentation content:

  • Preferred: Use mcp_microsoftdocs:microsoft_docs_fetch with query string from=learn-agent-skill. Returns Markdown.
  • Fallback: Use fetch_webpage with query string from=learn-agent-skill&accept=text/markdown. Returns Markdown.

Category Index

Category Lines Description
Decision Making L34-L38 Guidance for planning and executing migration of legacy Azure Private DNS zones to the new DNS zone model, including compatibility, steps, and considerations.
Architecture & Design Patterns L39-L44 Designing resilient private DNS architectures in Azure, including when to use centralized vs distributed DNS Private Resolvers and how to shard Private DNS zones for high availability.
Limits & Quotas L45-L51 DNS record, zone, and query limits for Azure DNS and Private DNS, including quotas, scaling behaviors, usage constraints, and how many zones/records you can create and manage.
Security L52-L62 Protecting DNS zones/records from deletion, configuring DNS security policies and logging, using DNSSEC for public zones, and securing Azure DNS with RBAC, alerts, and built-in protections.
Configuration L63-L75 Configuring Azure DNS behavior: reverse DNS, private DNS zones and resolvers, zone file import/export, monitoring/metrics/logs, and query/ResolutionPolicy settings for name resolution.
Integrations & Coding Patterns L76-L85 Using Azure CLI, PowerShell, or portal to create/manage DNS zones and records, and to delegate subdomains or import/export DNS zone files for automation and integration.

Decision Making

Topic URL
Migrate legacy Azure Private DNS zones to new model https://learn.microsoft.com/en-us/azure/dns/private-dns-migration-guide

Architecture & Design Patterns

Topic URL
Choose centralized vs distributed Azure DNS Private Resolver https://learn.microsoft.com/en-us/azure/dns/private-resolver-architecture
Shard Azure Private DNS zones for resiliency https://learn.microsoft.com/en-us/azure/dns/sharding-private-dns-zones

Limits & Quotas

Topic URL
Azure DNS FAQs on limits and behaviors https://learn.microsoft.com/en-us/azure/dns/dns-faq
Azure Private DNS FAQs on limits and usage https://learn.microsoft.com/en-us/azure/dns/dns-faq-private
Understand Azure Private DNS zones and limits https://learn.microsoft.com/en-us/azure/dns/private-dns-privatednszone

Security

Topic URL
Protect Azure Private DNS zones and records https://learn.microsoft.com/en-us/azure/dns/dns-protect-private-zones-recordsets
Protect Azure DNS zones and records from deletion https://learn.microsoft.com/en-us/azure/dns/dns-protect-zones-recordsets
Configure DNS security policy and traffic logging https://learn.microsoft.com/en-us/azure/dns/dns-traffic-log-how-to
Use DNSSEC zone signing with Azure Public DNS https://learn.microsoft.com/en-us/azure/dns/dnssec
Enable DNSSEC signing for Azure Public DNS zones https://learn.microsoft.com/en-us/azure/dns/dnssec-how-to
Remove DNSSEC signing from Azure Public DNS zones https://learn.microsoft.com/en-us/azure/dns/dnssec-unsign
Secure Azure DNS with roles, alerts, and protections https://learn.microsoft.com/en-us/azure/dns/secure-dns

Configuration

Topic URL
Configure reverse DNS for Azure-hosted services https://learn.microsoft.com/en-us/azure/dns/dns-reverse-dns-for-azure-services
Host reverse DNS lookup zones in Azure DNS https://learn.microsoft.com/en-us/azure/dns/dns-reverse-dns-hosting
Configure monitoring and alerts for Azure DNS https://learn.microsoft.com/en-us/azure/dns/monitor-dns
Reference for Azure DNS monitoring metrics and logs https://learn.microsoft.com/en-us/azure/dns/monitor-dns-reference
Query Azure Private DNS with Azure Resource Graph https://learn.microsoft.com/en-us/azure/dns/private-dns-arg
Configure ResolutionPolicy for private DNS internet fallback https://learn.microsoft.com/en-us/azure/dns/private-dns-fallback
Import and export private DNS zone files with CLI https://learn.microsoft.com/en-us/azure/dns/private-dns-import-export
Import and export private DNS zone files via portal https://learn.microsoft.com/en-us/azure/dns/private-dns-import-export-portal
Configure Azure DNS Private Resolver endpoints and rulesets https://learn.microsoft.com/en-us/azure/dns/private-resolver-endpoints-rulesets

Integrations & Coding Patterns

Topic URL
Delegate DNS subdomains using Azure PowerShell https://learn.microsoft.com/en-us/azure/dns/delegate-subdomain-ps
Import and export DNS zone files using Azure CLI https://learn.microsoft.com/en-us/azure/dns/dns-import-export
Import and export DNS zone files via Azure portal https://learn.microsoft.com/en-us/azure/dns/dns-import-export-portal
Manage Azure DNS zones using PowerShell commands https://learn.microsoft.com/en-us/azure/dns/dns-operations-dnszones
Manage Azure DNS zones with Azure CLI https://learn.microsoft.com/en-us/azure/dns/dns-operations-dnszones-cli
Manage Azure DNS records with PowerShell https://learn.microsoft.com/en-us/azure/dns/dns-operations-recordsets
Manage Azure DNS records using Azure CLI https://learn.microsoft.com/en-us/azure/dns/dns-operations-recordsets-cli
Files1
1 files · 18.2 KB

Select a file to preview

Overall Score

68/100

Grade

C

Adequate

Safety

75

Quality

62

Clarity

75

Completeness

58

Summary

This skill provides expert guidance on Azure DNS development, covering decision-making, architecture patterns, limits/quotas, security, configuration, and coding integrations. It functions as a knowledge reference hub that directs agents to fetch remote Microsoft Learn documentation using MCP tools or fallback web fetching, combined with curated topic catalogs organized by category.

Detected Capabilities

network accessdocumentation fetching (mcp_microsoftdocs or fetch_webpage)file reading (via read_file for skill-scoped content)

Trigger Keywords

Phrases that MCP clients use to match this skill to user intent.

azure dns configurationprivate dns zonesdnssec setupdns migrationreverse dnsazure dns limitsdns security policy

Risk Signals

INFO

Network access required for documentation fetching via mcp_microsoftdocs:microsoft_docs_fetch or fetch_webpage

compatibility field and 'How to Use This Skill' section
INFO

External URL references to learn.microsoft.com for documentation content

All category sections (Decision Making through Integrations & Coding Patterns)
INFO

Dependency on external tool availability (mcp_microsoftdocs) with fallback mechanism documented

Tool availability note in 'How to Use This Skill'

Referenced Domains

External domains referenced in skill content, detected by static analysis.

github.comlearn.microsoft.com

Use Cases

  • Migrating legacy Azure Private DNS zones to new models
  • Designing resilient private DNS architectures with centralized vs distributed resolvers
  • Understanding Azure DNS and Private DNS zone/record limits and quotas
  • Protecting DNS zones and records from deletion with RBAC and security policies
  • Configuring reverse DNS, monitoring, metrics, and ResolutionPolicy for name resolution
  • Managing DNS zones and records using Azure CLI, PowerShell, or portal
  • Enabling and managing DNSSEC signing for public Azure DNS zones

Quality Notes

  • Well-structured category index with clear line-range references for agents to locate content sections
  • Frontmatter includes generated_at metadata enabling staleness detection (3-month freshness guidance)
  • Comprehensive topic URL catalog organized by 6 logical categories covering Azure DNS surface area
  • Clear fallback strategy documented: primary tool (mcp_microsoftdocs) with fetch_webpage as alternative
  • Instructions explicitly advise agents on tool availability checks and installation guidance
  • All URLs reference official Microsoft Learn documentation, reducing hallucination/accuracy risks
  • Scope boundaries are well-defined: explicitly excludes Traffic Manager, Front Door, Virtual Network, and Private Link (cross-references provided)
  • Line-range references (L34-L38, etc.) appear to be placeholders but are never populated with actual content in the skill file
  • No error handling guidance for network failures or documentation fetch timeouts
  • Content sections referenced in the Category Index (e.g., L34-L38) are not present in the skill file itself
Model: claude-haiku-4-5-20251001Analyzed: Jun 26, 2026

Reviews

Add this skill to your library to leave a review.

No reviews yet

Be the first to share your experience.

Use MicrosoftDocs/azure-dns in your dev environment

Command Palette

Search for a command to run...