Question: why do some domains resolve externally while others do not?

[atxryan]

Azure DNS does not buy domain names, so the CAF implementation is handling this by using an ARM template to buy a domain for a randomly generated string. When we pass our domain name of "ngsa-monitoring-dev.com" it must be bypassing this portion of the deployment.

Link to the module implementation for buying a domain: terraform-azurerm-caf/module.tf at master · aztfmod/terraform-azurerm-caf (github.com)
CAF module for "domain_name_registrations": terraform-azurerm-caf/networking_domain_name_registrations.tf at master · aztfmod/terraform-azurerm-caf (github.com)
Domain name registration object in our terraform deployments: https://github.com/retaildevcrews/caf-terraform-landingzones-starter/blob/7b53f82013e015ef9c1d8bbdae76fc89b220acf9/enterprise_scale/construction_sets/aks/online/aks_secure_baseline/configuration/agw/domain.tfvars#L24