Azure DNS Connection

Learn how to configure an Azure DNS Connection for Infisical.

Infisical supports connecting to Azure DNS using a Service Principal with Client Secrets for secure access to manage DNS records in your Azure DNS zones.

Client Secret Authentication

To use client secret authentication, ensure your Azure Service Principal has the required permissions to manage DNS records in your Azure DNS Zone.

Prerequisites:

• Set up Azure and have an existing DNS Zone.
• An Azure Service Principal (App Registration) with a Client Secret.

1. Navigate to your DNS Zone

   In the Azure Portal, navigate to your DNS Zone that you want to use for ACME DNS validation. Click on Access control (IAM) in the left sidebar, then click Add > Add role assignment.

   
2. Assign DNS Zone Contributor Role

   Search for and select the DNS Zone Contributor role, then click Next.

   
3. Select your Service Principal

   Click Select members, search for your App Registration (Service Principal), select it, and click Select.

   

   Click Review + assign to complete the role assignment.

Setup Azure DNS Connection in Infisical

1. Navigate to App Connections

   Navigate to the App Connections page in the desired project.

   
2. Add Connection

   Select the Azure DNS Connection option from the connection options modal.

   
3. Create Connection

   Fill in the Tenant ID, Client ID, Client Secret, and Subscription ID fields with the credentials from your Azure Service Principal.

   

   You can find your Subscription ID in the Azure Portal under Subscriptions. The Tenant ID and Client ID can be found in your App Registration’s Overview page.

4. Connection Created

   Your Azure DNS Connection is now available for use in your Infisical projects.