Public preview: Public IP Domain Name Label Scope

We are announcing the public preview for a new capability in Azure Public IP address that can prevent DNS subdomain takeover while still allowing for re-use of DNS names.

You can now use a new Domain Name Label Scope parameter when creating a new public IP address, which defines what DNS name a public IP with the same name will use for a given scope (such as tenant, subscription, resource group). When this parameter is utilized, the public IP address’ DNS name will add a hashed string, which will remain constant within that scope. If a malicious actor outside of this scope attempts to deploy a public IP address using the same template, the provided domain name label will be different even if the original public IP resource is removed-- preventing any DNS subdomain takeover.

For more information about Azure Public IP addresses, please see our documentation.