def create_private_google_access_dns_zone(context):
  """Creates a DNS Zone for the use of Private Google Access

  The DNS Zone config depends on the VPC network having been completely
  instantiated, so it includes a dependsOn reference to the list of resources
  generated by the network sub-template.

  Args:
    context: the DM context object.

  Returns:
    A resource instantiating the private_google_access_dns_zone.py sub-template.
  """
  return [{
    'type': 'templates/private_google_access_dns_zone.py',
    'name': 'fc-private-google-access-dns-zone',
    'properties': {
      'resourceName': 'private-google-access-dns-zone',
      'projectId': '$(ref.fc-project.projectId)',
      'network': '$(ref.fc-network.selfLink)',
      'dependsOn': '$(ref.fc-network.resourceNames)'
    }
  }]