Hello @Cruz, Alfredo ,
Welcome to Microsoft Q&A Platform. Thank you for reaching out & hope you are doing well.
I understand you received an alert for Azure DNS as following "Status: Degraded : Current DNS zone contains one or more delegation records for child DNS zone. However, this DNS zone also contains records below delegation record that should only be present in the child zone. Please remove or move the delegated records (except glue records)".
A Degraded status indicates that the resource health check has detected a delegation issue with your DNS zones. Correct the delegation configuration and wait 24 hours for the status to change to Available.
You can find more details about this issue in the below troubleshooting guide:
https://learn.microsoft.com/en-us/azure/dns/dns-troubleshoot#degraded
In the above troubleshooting guide, you can find an example of an unhealthy zone with inconsistencies that could cause the zone to be in Degraded status.
How can you fix it? - To resolve, locate and remove all records except glue records under NS delegation records in your parent zone.
What are glue records? - These are records under the delegation record, which help direct traffic to the delegated/child zones using their IP addresses and are configured as seen in the following:
How to locate unhealthy delegation records? - A script has been created to find the unhealthy delegation records in your zone. The script will report records, which are unhealthy.
- Save the script located at: Find unhealthy DNS records in Azure DNS - PowerShell script sample.
- Execute the script as mentioned in the script editor. Script can be edited to meet your requirements.
Kindly let us know if the above helps or you need further assistance on this issue.
Please "Accept the answer" if the information helped you. This will help us and others in the community as well.