[AVM Module Issue]: RBAC for private_dns_zone_id

[SumithChandran]

Check for previous/existing GitHub issues

• I have checked for previous/existing GitHub issues

Issue Type?

Bug

(Optional) Module Version

0.5.0(latest)

(Optional) Correlation Id

No response

Description

We had to give our SPN(we use to deploy resources with Terraform Cloud) elevated rights on the DNS zone to allow it to update the RBAC there because of this logic in AVM code.

Since we are using hub and spoke architecture, we are consuming existing DNS zone available inside our network.
So if there is an option to disable this, it would be great since its trying to add this Private DNS Zone Contributor which is required by the blueprint.

[matt-FFFFFF]

Hi there Sumith Chandran (@SumithChandran)

What behaviour are you looking for here? From initial inspection you can disable the role assignment using the private_dns_zone_id_enabled variable but this may have other consequences.

Are you able to more more explicit please?

#RR

[microsoft-github-policy-service]