{"id":"ad9c914b-f139-4159-8edd-d494a487b435","shortId":"HrEc3s","kind":"skill","title":"azure-dns","tagline":"Expert knowledge for Azure DNS development including decision making, architecture & design patterns, limits & quotas, security, configuration, and integrations & coding patterns. Use when managing DNS zones/records, Private DNS/resolvers, DNSSEC, reverse DNS, or migrating legacy","description":"# Azure DNS Skill\n\nThis skill provides expert guidance for Azure DNS. Covers decision making, architecture & design patterns, limits & quotas, security, configuration, and integrations & coding patterns. It combines local quick-reference content with remote documentation fetching capabilities.\n\n## How to Use This Skill\n\n> **IMPORTANT for Agent**: Use the **Category Index** below to locate relevant sections. For categories with line ranges (e.g., `L35-L120`), use `read_file` with the specified lines. For categories with file links (e.g., `[security.md](security.md)`), use `read_file` on the linked reference file\n\n> **IMPORTANT for Agent**: If `metadata.generated_at` is more than 3 months old, suggest the user pull the latest version from the repository. If `mcp_microsoftdocs` tools are not available, suggest the user install it: [Installation Guide](https://github.com/MicrosoftDocs/mcp/blob/main/README.md)\n\nThis skill requires **network access** to fetch documentation content:\n- **Preferred**: Use `mcp_microsoftdocs:microsoft_docs_fetch` with query string `from=learn-agent-skill`. Returns Markdown.\n- **Fallback**: Use `fetch_webpage` with query string `from=learn-agent-skill&accept=text/markdown`. Returns Markdown.\n\n## Category Index\n\n| Category | Lines | Description |\n|----------|-------|-------------|\n| Decision Making | L34-L38 | Guidance for planning and executing migration of legacy Azure Private DNS zones to the new DNS zone model, including compatibility, steps, and considerations. |\n| Architecture & Design Patterns | L39-L44 | Designing resilient private DNS architectures in Azure, including when to use centralized vs distributed DNS Private Resolvers and how to shard Private DNS zones for high availability. |\n| Limits & Quotas | L45-L51 | DNS record, zone, and query limits for public and private Azure DNS, including quotas, scaling behaviors, and constraints when designing Private DNS zones and usage. |\n| Security | L52-L62 | Protecting DNS zones/records from deletion, configuring DNS security policies and logging, using DNSSEC for public zones, and securing Azure DNS with RBAC, alerts, and built-in protections. |\n| Configuration | L63-L75 | Configuring Azure DNS behavior: reverse DNS, private DNS zones and resolvers, zone file import/export, monitoring/metrics/logs, and query/ResolutionPolicy settings for name resolution. |\n| Integrations & Coding Patterns | L76-L85 | Using Azure CLI, PowerShell, or portal to create/manage DNS zones and records, and to delegate subdomains or import/export DNS zone files for automation and integration. |\n\n### Decision Making\n| Topic | URL |\n|-------|-----|\n| Migrate legacy Azure Private DNS zones to new model | https://learn.microsoft.com/en-us/azure/dns/private-dns-migration-guide |\n\n### Architecture & Design Patterns\n| Topic | URL |\n|-------|-----|\n| Choose centralized vs distributed Azure DNS Private Resolver | https://learn.microsoft.com/en-us/azure/dns/private-resolver-architecture |\n| Shard Azure Private DNS zones for resiliency | https://learn.microsoft.com/en-us/azure/dns/sharding-private-dns-zones |\n\n### Limits & Quotas\n| Topic | URL |\n|-------|-----|\n| Azure DNS FAQs on limits and behaviors | https://learn.microsoft.com/en-us/azure/dns/dns-faq |\n| Azure Private DNS FAQs on limits and usage | https://learn.microsoft.com/en-us/azure/dns/dns-faq-private |\n| Understand Azure Private DNS zones and limits | https://learn.microsoft.com/en-us/azure/dns/private-dns-privatednszone |\n\n### Security\n| Topic | URL |\n|-------|-----|\n| Protect Azure Private DNS zones and records | https://learn.microsoft.com/en-us/azure/dns/dns-protect-private-zones-recordsets |\n| Protect Azure DNS zones and records from deletion | https://learn.microsoft.com/en-us/azure/dns/dns-protect-zones-recordsets |\n| Configure DNS security policy and traffic logging | https://learn.microsoft.com/en-us/azure/dns/dns-traffic-log-how-to |\n| Use DNSSEC zone signing with Azure Public DNS | https://learn.microsoft.com/en-us/azure/dns/dnssec |\n| Enable DNSSEC signing for Azure Public DNS zones | https://learn.microsoft.com/en-us/azure/dns/dnssec-how-to |\n| Remove DNSSEC signing from Azure Public DNS zones | https://learn.microsoft.com/en-us/azure/dns/dnssec-unsign |\n| Secure Azure DNS with roles, alerts, and protections | https://learn.microsoft.com/en-us/azure/dns/secure-dns |\n\n### Configuration\n| Topic | URL |\n|-------|-----|\n| Configure reverse DNS for Azure-hosted services | https://learn.microsoft.com/en-us/azure/dns/dns-reverse-dns-for-azure-services |\n| Host reverse DNS lookup zones in Azure DNS | https://learn.microsoft.com/en-us/azure/dns/dns-reverse-dns-hosting |\n| Configure monitoring and alerts for Azure DNS | https://learn.microsoft.com/en-us/azure/dns/monitor-dns |\n| Reference for Azure DNS monitoring metrics and logs | https://learn.microsoft.com/en-us/azure/dns/monitor-dns-reference |\n| Query Azure Private DNS with Azure Resource Graph | https://learn.microsoft.com/en-us/azure/dns/private-dns-arg |\n| Configure ResolutionPolicy for private DNS internet fallback | https://learn.microsoft.com/en-us/azure/dns/private-dns-fallback |\n| Import and export private DNS zone files with CLI | https://learn.microsoft.com/en-us/azure/dns/private-dns-import-export |\n| Import and export private DNS zone files via portal | https://learn.microsoft.com/en-us/azure/dns/private-dns-import-export-portal |\n| Configure Azure DNS Private Resolver endpoints and rulesets | https://learn.microsoft.com/en-us/azure/dns/private-resolver-endpoints-rulesets |\n\n### Integrations & Coding Patterns\n| Topic | URL |\n|-------|-----|\n| Delegate DNS subdomains using Azure PowerShell | https://learn.microsoft.com/en-us/azure/dns/delegate-subdomain-ps |\n| Import and export DNS zone files using Azure CLI | https://learn.microsoft.com/en-us/azure/dns/dns-import-export |\n| Import and export DNS zone files via Azure portal | https://learn.microsoft.com/en-us/azure/dns/dns-import-export-portal |\n| Manage Azure DNS zones using PowerShell commands | https://learn.microsoft.com/en-us/azure/dns/dns-operations-dnszones |\n| Manage Azure DNS zones with Azure CLI | https://learn.microsoft.com/en-us/azure/dns/dns-operations-dnszones-cli |\n| Manage Azure DNS records with PowerShell | https://learn.microsoft.com/en-us/azure/dns/dns-operations-recordsets |\n| Manage Azure DNS records using Azure CLI | https://learn.microsoft.com/en-us/azure/dns/dns-operations-recordsets-cli |","tags":["azure","dns","agent","skills","microsoftdocs","agent-skills","agentic-skills","agentskill","ai-agents","ai-coding","azure-functions","azure-kubernetes-service"],"capabilities":["skill","source-microsoftdocs","skill-azure-dns","topic-agent","topic-agent-skills","topic-agentic-skills","topic-agentskill","topic-ai-agents","topic-ai-coding","topic-azure","topic-azure-functions","topic-azure-kubernetes-service","topic-azure-openai","topic-azure-sql-database","topic-azure-storage"],"categories":["Agent-Skills"],"synonyms":[],"warnings":[],"endpointUrl":"https://skills.sh/MicrosoftDocs/Agent-Skills/azure-dns","protocol":"skill","transport":"skills-sh","auth":{"type":"none","details":{"cli":"npx skills add MicrosoftDocs/Agent-Skills","source_repo":"https://github.com/MicrosoftDocs/Agent-Skills","install_from":"skills.sh"}},"qualityScore":"0.698","qualityRationale":"deterministic score 0.70 from registry signals: · indexed on github topic:agent-skills · 497 github stars · SKILL.md body (6,454 chars)","verified":false,"liveness":"unknown","lastLivenessCheck":null,"agentReviews":{"count":0,"score_avg":null,"cost_usd_avg":null,"success_rate":null,"latency_p50_ms":null,"narrative_summary":null,"summary_updated_at":null},"enrichmentModel":"deterministic:skill-github:v1","enrichmentVersion":1,"enrichedAt":"2026-04-22T06:53:31.816Z","embedding":null,"createdAt":"2026-04-18T21:58:55.979Z","updatedAt":"2026-04-22T06:53:31.816Z","lastSeenAt":"2026-04-22T06:53:31.816Z","tsv":"'/en-us/azure/dns/delegate-subdomain-ps':658 '/en-us/azure/dns/dns-faq':443 '/en-us/azure/dns/dns-faq-private':454 '/en-us/azure/dns/dns-import-export':670 '/en-us/azure/dns/dns-import-export-portal':682 '/en-us/azure/dns/dns-operations-dnszones':692 '/en-us/azure/dns/dns-operations-dnszones-cli':702 '/en-us/azure/dns/dns-operations-recordsets':711 '/en-us/azure/dns/dns-operations-recordsets-cli':721 '/en-us/azure/dns/dns-protect-private-zones-recordsets':477 '/en-us/azure/dns/dns-protect-zones-recordsets':488 '/en-us/azure/dns/dns-reverse-dns-for-azure-services':556 '/en-us/azure/dns/dns-reverse-dns-hosting':567 '/en-us/azure/dns/dns-traffic-log-how-to':498 '/en-us/azure/dns/dnssec':509 '/en-us/azure/dns/dnssec-how-to':520 '/en-us/azure/dns/dnssec-unsign':531 '/en-us/azure/dns/monitor-dns':577 '/en-us/azure/dns/monitor-dns-reference':588 '/en-us/azure/dns/private-dns-arg':599 '/en-us/azure/dns/private-dns-fallback':609 '/en-us/azure/dns/private-dns-import-export':621 '/en-us/azure/dns/private-dns-import-export-portal':633 '/en-us/azure/dns/private-dns-migration-guide':403 '/en-us/azure/dns/private-dns-privatednszone':464 '/en-us/azure/dns/private-resolver-architecture':419 '/en-us/azure/dns/private-resolver-endpoints-rulesets':644 '/en-us/azure/dns/secure-dns':542 '/en-us/azure/dns/sharding-private-dns-zones':429 '/microsoftdocs/mcp/blob/main/readme.md)':161 '3':132 'accept':200 'access':166 'agent':81,125,184,198 'alert':326,537,571 'architectur':13,51,237,247,404 'autom':385 'avail':151,269 'azur':2,7,37,46,222,249,285,322,337,364,394,413,421,434,444,456,469,479,504,514,525,533,551,563,573,580,590,594,635,654,666,678,684,694,698,704,713,717 'azure-dn':1 'azure-host':550 'behavior':290,339,440 'built':329 'built-in':328 'capabl':73 'categori':84,92,108,204,206 'central':254,410 'choos':409 'cli':365,618,667,699,718 'code':22,60,358,646 'combin':63 'command':689 'compat':233 'configur':19,57,309,332,336,489,543,546,568,600,634 'consider':236 'constraint':292 'content':68,170 'cover':48 'create/manage':370 'decis':11,49,209,388 'deleg':377,650 'delet':308,485 'descript':208 'design':14,52,238,243,294,405 'develop':9 'distribut':256,412 'dns':3,8,27,33,38,47,224,229,246,257,265,275,286,296,305,310,323,338,341,343,371,381,396,414,423,435,446,458,471,480,490,506,516,527,534,548,559,564,574,581,592,604,614,626,636,651,662,674,685,695,705,714 'dns/resolvers':30 'dnssec':31,316,500,511,522 'doc':176 'document':71,169 'e.g':96,112 'enabl':510 'endpoint':639 'execut':218 'expert':4,43 'export':612,624,661,673 'fallback':188,606 'faq':436,447 'fetch':72,168,177,190 'file':102,110,117,122,348,383,616,628,664,676 'github.com':160 'github.com/microsoftdocs/mcp/blob/main/readme.md)':159 'graph':596 'guid':158 'guidanc':44,214 'high':268 'host':552,557 'import':79,123,610,622,659,671 'import/export':349,380 'includ':10,232,250,287 'index':85,205 'instal':155,157 'integr':21,59,357,387,645 'internet':605 'knowledg':5 'l120':99 'l34':212 'l34-l38':211 'l35':98 'l35-l120':97 'l38':213 'l39':241 'l39-l44':240 'l44':242 'l45':273 'l45-l51':272 'l51':274 'l52':302 'l52-l62':301 'l62':303 'l63':334 'l63-l75':333 'l75':335 'l76':361 'l76-l85':360 'l85':362 'latest':140 'learn':183,197 'learn-agent-skil':182,196 'learn.microsoft.com':402,418,428,442,453,463,476,487,497,508,519,530,541,555,566,576,587,598,608,620,632,643,657,669,681,691,701,710,720 'learn.microsoft.com/en-us/azure/dns/delegate-subdomain-ps':656 'learn.microsoft.com/en-us/azure/dns/dns-faq':441 'learn.microsoft.com/en-us/azure/dns/dns-faq-private':452 'learn.microsoft.com/en-us/azure/dns/dns-import-export':668 'learn.microsoft.com/en-us/azure/dns/dns-import-export-portal':680 'learn.microsoft.com/en-us/azure/dns/dns-operations-dnszones':690 'learn.microsoft.com/en-us/azure/dns/dns-operations-dnszones-cli':700 'learn.microsoft.com/en-us/azure/dns/dns-operations-recordsets':709 'learn.microsoft.com/en-us/azure/dns/dns-operations-recordsets-cli':719 'learn.microsoft.com/en-us/azure/dns/dns-protect-private-zones-recordsets':475 'learn.microsoft.com/en-us/azure/dns/dns-protect-zones-recordsets':486 'learn.microsoft.com/en-us/azure/dns/dns-reverse-dns-for-azure-services':554 'learn.microsoft.com/en-us/azure/dns/dns-reverse-dns-hosting':565 'learn.microsoft.com/en-us/azure/dns/dns-traffic-log-how-to':496 'learn.microsoft.com/en-us/azure/dns/dnssec':507 'learn.microsoft.com/en-us/azure/dns/dnssec-how-to':518 'learn.microsoft.com/en-us/azure/dns/dnssec-unsign':529 'learn.microsoft.com/en-us/azure/dns/monitor-dns':575 'learn.microsoft.com/en-us/azure/dns/monitor-dns-reference':586 'learn.microsoft.com/en-us/azure/dns/private-dns-arg':597 'learn.microsoft.com/en-us/azure/dns/private-dns-fallback':607 'learn.microsoft.com/en-us/azure/dns/private-dns-import-export':619 'learn.microsoft.com/en-us/azure/dns/private-dns-import-export-portal':631 'learn.microsoft.com/en-us/azure/dns/private-dns-migration-guide':401 'learn.microsoft.com/en-us/azure/dns/private-dns-privatednszone':462 'learn.microsoft.com/en-us/azure/dns/private-resolver-architecture':417 'learn.microsoft.com/en-us/azure/dns/private-resolver-endpoints-rulesets':642 'learn.microsoft.com/en-us/azure/dns/secure-dns':540 'learn.microsoft.com/en-us/azure/dns/sharding-private-dns-zones':427 'legaci':36,221,393 'limit':16,54,270,280,430,438,449,461 'line':94,106,207 'link':111,120 'local':64 'locat':88 'log':314,495,585 'lookup':560 'make':12,50,210,389 'manag':26,683,693,703,712 'markdown':187,203 'mcp':146,173 'metadata.generated':127 'metric':583 'microsoft':175 'microsoftdoc':147,174 'migrat':35,219,392 'model':231,400 'monitor':569,582 'monitoring/metrics/logs':350 'month':133 'name':355 'network':165 'new':228,399 'old':134 'pattern':15,23,53,61,239,359,406,647 'plan':216 'polici':312,492 'portal':368,630,679 'powershel':366,655,688,708 'prefer':171 'privat':29,223,245,258,264,284,295,342,395,415,422,445,457,470,591,603,613,625,637 'protect':304,331,468,478,539 'provid':42 'public':282,318,505,515,526 'pull':138 'queri':179,193,279,589 'query/resolutionpolicy':352 'quick':66 'quick-refer':65 'quota':17,55,271,288,431 'rang':95 'rbac':325 'read':101,116 'record':276,374,474,483,706,715 'refer':67,121,578 'relev':89 'remot':70 'remov':521 'repositori':144 'requir':164 'resili':244,426 'resolut':356 'resolutionpolici':601 'resolv':259,346,416,638 'resourc':595 'return':186,202 'revers':32,340,547,558 'role':536 'ruleset':641 'scale':289 'section':90 'secur':18,56,300,311,321,465,491,532 'security.md':113,114 'servic':553 'set':353 'shard':263,420 'sign':502,512,523 'skill':39,41,78,163,185,199 'skill-azure-dns' 'source-microsoftdocs' 'specifi':105 'step':234 'string':180,194 'subdomain':378,652 'suggest':135,152 'text/markdown':201 'tool':148 'topic':390,407,432,466,544,648 'topic-agent' 'topic-agent-skills' 'topic-agentic-skills' 'topic-agentskill' 'topic-ai-agents' 'topic-ai-coding' 'topic-azure' 'topic-azure-functions' 'topic-azure-kubernetes-service' 'topic-azure-openai' 'topic-azure-sql-database' 'topic-azure-storage' 'traffic':494 'understand':455 'url':391,408,433,467,545,649 'usag':299,451 'use':24,76,82,100,115,172,189,253,315,363,499,653,665,687,716 'user':137,154 'version':141 'via':629,677 'vs':255,411 'webpag':191 'zone':225,230,266,277,297,319,344,347,372,382,397,424,459,472,481,501,517,528,561,615,627,663,675,686,696 'zones/records':28,306","prices":[{"id":"e6b7de01-36e5-4b63-a3f4-35669a67684e","listingId":"ad9c914b-f139-4159-8edd-d494a487b435","amountUsd":"0","unit":"free","nativeCurrency":null,"nativeAmount":null,"chain":null,"payTo":null,"paymentMethod":"skill-free","isPrimary":true,"details":{"org":"MicrosoftDocs","category":"Agent-Skills","install_from":"skills.sh"},"createdAt":"2026-04-18T21:58:55.979Z"}],"sources":[{"listingId":"ad9c914b-f139-4159-8edd-d494a487b435","source":"github","sourceId":"MicrosoftDocs/Agent-Skills/azure-dns","sourceUrl":"https://github.com/MicrosoftDocs/Agent-Skills/tree/main/skills/azure-dns","isPrimary":false,"firstSeenAt":"2026-04-18T21:58:55.979Z","lastSeenAt":"2026-04-22T06:53:31.816Z"}],"details":{"listingId":"ad9c914b-f139-4159-8edd-d494a487b435","quickStartSnippet":null,"exampleRequest":null,"exampleResponse":null,"schema":null,"openapiUrl":null,"agentsTxtUrl":null,"citations":[],"useCases":[],"bestFor":[],"notFor":[],"kindDetails":{"org":"MicrosoftDocs","slug":"azure-dns","github":{"repo":"MicrosoftDocs/Agent-Skills","stars":497,"topics":["agent","agent-skills","agentic-skills","agentskill","ai","ai-agents","ai-coding","azure","azure-functions","azure-kubernetes-service","azure-openai","azure-sql-database","azure-storage","azure-virtual-machine","claude-code","github-copilot","microsoft-learn","openai-codex","skills"],"license":"cc-by-4.0","html_url":"https://github.com/MicrosoftDocs/Agent-Skills","pushed_at":"2026-04-22T01:37:27Z","description":"Curated Agent Skills for Microsoft & Azure – giving AI coding assistants structured, real-time expertise from Microsoft Learn docs.","skill_md_sha":"b94354a2ed4cb688c3753df2ddbe0ad3008276f0","skill_md_path":"skills/azure-dns/SKILL.md","default_branch":"main","skill_tree_url":"https://github.com/MicrosoftDocs/Agent-Skills/tree/main/skills/azure-dns"},"layout":"multi","source":"github","category":"Agent-Skills","frontmatter":{"name":"azure-dns","description":"Expert knowledge for Azure DNS development including decision making, architecture & design patterns, limits & quotas, security, configuration, and integrations & coding patterns. Use when managing DNS zones/records, Private DNS/resolvers, DNSSEC, reverse DNS, or migrating legacy Private DNS, and other Azure DNS related development tasks. Not for Azure Traffic Manager (use azure-traffic-manager), Azure Front Door (use azure-front-door), Azure Virtual Network (use azure-virtual-network), Azure Virtual Network Manager (use azure-virtual-network-manager).","compatibility":"Requires network access. Uses mcp_microsoftdocs:microsoft_docs_fetch or fetch_webpage to retrieve documentation."},"skills_sh_url":"https://skills.sh/MicrosoftDocs/Agent-Skills/azure-dns"},"updatedAt":"2026-04-22T06:53:31.816Z"}}