> ## Documentation Index
> Fetch the complete documentation index at: https://infisical.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Azure DNS Connection

> Learn how to configure an Azure DNS Connection for Infisical.

Infisical supports connecting to Azure DNS using a Service Principal with Client Secrets for secure access to manage DNS records in your Azure DNS zones.

<Accordion title="Client Secret Authentication">
  To use client secret authentication, ensure your Azure Service Principal has the required permissions to manage DNS records in your Azure DNS Zone.

  **Prerequisites:**

  * Set up Azure and have an existing DNS Zone.
  * An Azure Service Principal (App Registration) with a Client Secret.

  <Steps>
    <Step title="Navigate to your DNS Zone">
      In the Azure Portal, navigate to your DNS Zone that you want to use for ACME DNS validation. Click on **Access control (IAM)** in the left sidebar, then click **Add** > **Add role assignment**.

      <img src="https://mintlify.s3.us-west-1.amazonaws.com/infisical/images/app-connections/azure-dns/azure-dns-zone.png" alt="Navigate to DNS Zone" />
    </Step>

    <Step title="Assign DNS Zone Contributor Role">
      Search for and select the **DNS Zone Contributor** role, then click **Next**.

      <img src="https://mintlify.s3.us-west-1.amazonaws.com/infisical/images/app-connections/azure-dns/azure-dns-role.png" alt="Select DNS Zone Contributor Role" />
    </Step>

    <Step title="Select your Service Principal">
      Click **Select members**, search for your App Registration (Service Principal), select it, and click **Select**.

      <img src="https://mintlify.s3.us-west-1.amazonaws.com/infisical/images/app-connections/azure-dns/azure-dns-select-sp.png" alt="Select Service Principal" />

      Click **Review + assign** to complete the role assignment.
    </Step>
  </Steps>
</Accordion>

## Setup Azure DNS Connection in Infisical

<Steps>
  <Step title="Navigate to App Connections">
    Navigate to the **App Connections** page in the desired project.

    <img src="https://mintlify.s3.us-west-1.amazonaws.com/infisical/images/app-connections/general/add-connection.png" alt="App Connections Tab" />
  </Step>

  <Step title="Add Connection">
    Select the **Azure DNS Connection** option from the connection options modal.

    <img src="https://mintlify.s3.us-west-1.amazonaws.com/infisical/images/app-connections/azure-dns/azure-dns-app-connection-select.png" alt="Select Azure DNS Connection" />
  </Step>

  <Step title="Create Connection">
    Fill in the **Tenant ID**, **Client ID**, **Client Secret**, and **Subscription ID** fields with the credentials from your Azure Service Principal.

    <img src="https://mintlify.s3.us-west-1.amazonaws.com/infisical/images/app-connections/azure-dns/azure-dns-app-connection-form.png" alt="Connect to Azure DNS" />

    <Tip>
      You can find your **Subscription ID** in the Azure Portal under **Subscriptions**. The **Tenant ID** and **Client ID** can be found in your App Registration's **Overview** page.
    </Tip>
  </Step>

  <Step title="Connection Created">
    Your **Azure DNS Connection** is now available for use in your Infisical projects.

    <img src="https://mintlify.s3.us-west-1.amazonaws.com/infisical/images/app-connections/azure-dns/azure-dns-app-connection-created.png" alt="Azure DNS Connection Created" />
  </Step>
</Steps>