Turbot Guardrails Hub 
Hub
Mods
Azure
40
Mods
162
Resource Types
1,906
Policies
932
Controls
103
Quick Actions
95
IAM

IAM Role: Azure/DNS/metadata

PermissionGrant
microsoft.network/dnszones/readmetadata
microsoft.network/dnszones/providers/microsoft.insights/metricdefinitions/readmetadata
microsoft.network/dnszones/providers/microsoft.insights/diagnosticsettings/readmetadata
microsoft.network/dnsoperationresults/readmetadata
microsoft.network/dnsoperationstatuses/readmetadata
microsoft.network/dnszones/all/readmetadata
microsoft.network/dnszones/recordsets/readmetadata
microsoft.network/dnszones/a/readmetadata
microsoft.network/dnszones/aaaa/readmetadata
microsoft.network/dnszones/ptr/readmetadata
microsoft.network/dnszones/mx/readmetadata
microsoft.network/dnszones/txt/readmetadata
microsoft.network/dnszones/srv/readmetadata
microsoft.network/dnszones/cname/readmetadata
microsoft.network/dnszones/ns/readmetadata
microsoft.network/dnszones/soa/readmetadata
microsoft.network/dnszones/caa/readmetadata
microsoft.network/privatednszones/readmetadata
microsoft.network/privatednszones/virtualnetworklinks/readmetadata
microsoft.network/privatednszones/a/readmetadata
microsoft.network/privatednszones/aaaa/readmetadata
microsoft.network/privatednszones/cname/readmetadata
microsoft.network/privatednszones/mx/readmetadata
microsoft.network/privatednszones/ptr/readmetadata
microsoft.network/privatednszones/soa/readmetadata
microsoft.network/privatednszones/srv/readmetadata
microsoft.network/privatednszones/txt/readmetadata
microsoft.network/privatednszones/all/readmetadata
microsoft.network/privatednszones/recordsets/readmetadata
microsoft.network/privatednszones/providers/microsoft.insights/diagnosticsettings/readmetadata
microsoft.network/privatednszones/providers/microsoft.insights/metricdefinitions/readmetadata
microsoft.resources/deployments/operations/readmetadata
microsoft.resources/deployments/readmetadata
microsoft.resources/subscriptions/resourcegroups/readmetadata