Azure DNS Connection - Infisical

Infisical supports connecting to Azure DNS using a Service Principal with Client Secrets for secure access to manage DNS records in your Azure DNS zones.

<Accordion title="Client Secret Authentication"> To use client secret authentication, ensure your Azure Service Principal has the required permissions to manage DNS records in your Azure DNS Zone.

Prerequisites:

Set up Azure and have an existing DNS Zone.
An Azure Service Principal (App Registration) with a Client Secret.

<Steps> <Step title="Navigate to your DNS Zone"> In the Azure Portal, navigate to your DNS Zone that you want to use for ACME DNS validation. Click on **Access control (IAM)** in the left sidebar, then click **Add** > **Add role assignment**.

  ![Navigate to DNS Zone](/images/app-connections/azure-dns/azure-dns-zone.png)
</Step>
<Step title="Assign DNS Zone Contributor Role">
  Search for and select the **DNS Zone Contributor** role, then click **Next**.

  ![Select DNS Zone Contributor Role](/images/app-connections/azure-dns/azure-dns-role.png)
</Step>
<Step title="Select your Service Principal">
  Click **Select members**, search for your App Registration (Service Principal), select it, and click **Select**.

  ![Select Service Principal](/images/app-connections/azure-dns/azure-dns-select-sp.png)

  Click **Review + assign** to complete the role assignment.
</Step>

</Steps> </Accordion>

Setup Azure DNS Connection in Infisical

<Steps> <Step title="Navigate to App Connections"> Navigate to the **App Connections** page in the desired project. ![App Connections Tab](/images/app-connections/general/add-connection.png) </Step> <Step title="Add Connection"> Select the **Azure DNS Connection** option from the connection options modal. ![Select Azure DNS Connection](/images/app-connections/azure-dns/azure-dns-app-connection-select.png) </Step> <Step title="Create Connection"> Fill in the **Tenant ID**, **Client ID**, **Client Secret**, and **Subscription ID** fields with the credentials from your Azure Service Principal.

![Connect to Azure DNS](/images/app-connections/azure-dns/azure-dns-app-connection-form.png)

<Tip>
  You can find your **Subscription ID** in the Azure Portal under **Subscriptions**. The **Tenant ID** and **Client ID** can be found in your App Registration's **Overview** page.
</Tip>

</Step> <Step title="Connection Created"> Your **Azure DNS Connection** is now available for use in your Infisical projects. ![Azure DNS Connection Created](/images/app-connections/azure-dns/azure-dns-app-connection-created.png) </Step> </Steps>