@dbdev  It looks correct, so that means your azure policy worked correctly. But you need to also check if that Private DNS Zone is linked to your VNET. Go to Private DNS Zone -> DNS Management -> Virtual Network Links. Your VNET should be linked there (if not that could be a problem)