I have a scenario where I have P2S devices connected via Azure VPN Gateway, but are not necessarily joined to the domain (probes in customer environments with split tunneling). Since I have no way in Azure VPN gateway to assign IPs to a specific cert or user, I want to register the device in DNS and keep it up to date via DDNS so it is reachable by name. Typically you'd do this with DHCP -> DNS registration, but the Azure VPN gateway can't use a DHCP server.
Is there a way to pre-define some A record accounts, assign security to a service account, and enable that service account to update dns dynamically from the client using a script or something similar?