I have like 20 tabs open of random SO and Azure docs. I created an App Service – it worked great w/ public access. We are moving it to use PE. The PE was setup using a VNET . I see the private IP now in the App Service (yay).

I saw that it created a private dns zone and had the a record and cname for routing inside the VNET through the private link. This matches expectations.

I’m now on a VM on that same VNET – when I hit the URL of the app service I am greeted w/ the 403 Forbidden (same as outside the VNET as expected). This is the main doc I’m focusing on – it says “You must set up a private DNS server or an Azure DNS private zone.” – the latter performed.

I even tried playing w/ the host entry like it mentioned but no luck.

Any advice?