Azure Front Door endpoint deployment stuck at "NotStarted" - all routes provisioned but deployment won't start

Problem

Azure Front Door endpoint deployment status is stuck at "NotStarted" despite all resources being successfully provisioned. The managed certificate cannot provision because deployment hasn't started, making the site inaccessible.

Environment

• SKU: Standard_AzureFrontDoor

Current Status

✅ Working:

• All 4 routes created and enabled - ProvisioningState: "Succeeded"
• All origin groups exist and are configured
• All origins configured
• Custom domain exists
• DNS correctly configured (CNAME points to Front Door endpoint)

❌ Blocked:

• Endpoint deployment status: "NotStarted" (stuck for extended period)
• Custom domain validation: "Pending"
• Managed certificate: Not provisioned (secret: null)
• Site inaccessible due to SSL certificate error

What I've Tried

1. Toggled routes enabled/disabled to trigger deployment
2. Recreated custom domain
3. Verified DNS configuration (CNAME correct)
4. Made small configuration changes to force refresh
5. All resources show "Succeeded" provisioning state

Additional Context

• Azure portal shows message about "AFD Service Management restrictions" and extended propagation times (up to 45 minutes)
• Deployment has been stuck well beyond the expected propagation window
• This appears to be a platform-level issue, not a configuration problem

Question

Has anyone encountered this issue? Are there any known workarounds or ways to manually trigger Front Door endpoint deployment? Should I open a support ticket, or is there something I'm missing in the configuration?

Terraform Configuration

Using Terraform with azurerm_cdn_frontdoor_endpoint and azurerm_cdn_frontdoor_route resources. All resources provision successfully, but deployment never starts.