azurerm_firewall does not allow you to enable firewall with default DNS servers

[vsabella]

https://github.com/terraform-providers/terraform-provider-azurerm/blob/8fc7613206855de21b1771a209510890f701a24b/azurerm/internal/services/firewall/firewall_resource.go#L624

AuzreRM Firewall does not allow you to enable the firewall DNS proxy unless you use Firewall Policy. This looks like a bug in the design of the module.

I want to enable the firewall DNS, without using a Firewall Policy object.

[darren-johnson]

This is an issue for us too. The newer 'Objects have been changed' message doesn't pick this up either.

[cpressland]

We've just bumped into this while planning a migration to AKS. I don't really see what operational benefits Firewall Policies provide us when using Terraform, so would rather continue using "Rules (Classic)" along with DNS Proxy if possible.

[github-actions]

I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues.
If you have found a problem that seems similar to this, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further.