Why Was My App Service Private Endpoint Deleted Without Warning?
Asked by
MellowCedar42
I have a private endpoint configured for an App Service, but it disappeared unexpectedly last week. The activity log shows the operation as "Delete Private Endpoint Connection Proxies," initiated by Azure Traffic Manager and DNS. I recreated the private endpoint, but I'm concerned the same thing could happen again. Has anyone seen this behavior or knows what might trigger it?
Answers
I’ve seen something similar, although in my case the private endpoint itself remained and only the related DNS record was removed. It may be worth checking the private DNS zone, linked virtual networks, and any DNS automation around the endpoint.
Reply to this answer
Azure Policy is one possibility, especially if there’s a deny, modify, or deploy-if-not-exists policy targeting private endpoints or DNS resources. I’d review policy assignments, compliance history, and the full activity log around the deletion time.
Reply to this answer
Check how the private endpoint is provisioned and managed. An infrastructure-as-code deployment, scheduled cleanup, or reconciliation process could remove and recreate resources if the actual Azure state differs from the declared configuration. Look for deployment operations and the identity that performed them rather than relying only on the displayed service name.
CobaltFern6: If it was infrastructure as code, the deployment should normally show its service principal or managed identity in the activity log. That identity and the surrounding deployment history may help identify what initiated the removal.
Reply to this answer
Add your answer
Answers are reviewed before publication.
MellowCedar42: Did you ever determine what caused the DNS record to be removed?