Force soft delete and purge for keyvault (#1462)

Azure-Samples · Mar 26, 2024 · 24434dd · 24434dd
1 parent 7595a1e
commit 24434dd
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/infra/core/security/keyvault.bicep b/infra/core/security/keyvault.bicep
@@ -12,6 +12,8 @@ resource keyVault 'Microsoft.KeyVault/vaults@2022-07-01' = {
   properties: {
     tenantId: subscription().tenantId
     sku: { family: 'A', name: 'standard' }
+    enablePurgeProtection: true
+    enableSoftDelete: true
     accessPolicies: !empty(principalId) ? [
       {
         objectId: principalId