I have a private endpoint configured for an App Service, but it disappeared unexpectedly last week. The activity log shows the operation as "Delete Private Endpoint Connection Proxies," initiated by Azure Traffic Manager and DNS. I recreated the private endpoint, but I'm concerned the same thing could happen again. Has anyone seen this behavior or knows what might trigger it?
3 Answers
Check how the private endpoint is provisioned and managed. An infrastructure-as-code deployment, scheduled cleanup, or reconciliation process could remove and recreate resources if the actual Azure state differs from the declared configuration. Look for deployment operations and the identity that performed them rather than relying only on the displayed service name.
Azure Policy is one possibility, especially if there’s a deny, modify, or deploy-if-not-exists policy targeting private endpoints or DNS resources. I’d review policy assignments, compliance history, and the full activity log around the deletion time.
I’ve seen something similar, although in my case the private endpoint itself remained and only the related DNS record was removed. It may be worth checking the private DNS zone, linked virtual networks, and any DNS automation around the endpoint.
Did you ever determine what caused the DNS record to be removed?
If it was infrastructure as code, the deployment should normally show its service principal or managed identity in the activity log. That identity and the surrounding deployment history may help identify what initiated the removal.