Revision history [back]

privatelink.azure-api.net zone was present on the internal DNS server for other reasons, but didn't have the CNAME record that was in the chain. Adding the CNAME internally resolved the issue.