Force soft delete and purge for keyvault (#1462)

tonybaloney · web-flow · commit 24434dde6dc7 · 2024-03-26T15:27:37.000+11:00
diff --git a/infra/core/security/keyvault.bicep b/infra/core/security/keyvault.bicep
@@ -12,6 +12,8 @@ resource keyVault 'Microsoft.KeyVault/vaults@2022-07-01' = {
   properties: {
     tenantId: subscription().tenantId
     sku: { family: 'A', name: 'standard' }
+    enablePurgeProtection: true
+    enableSoftDelete: true
     accessPolicies: !empty(principalId) ? [
       {
         objectId: principalId

Original file line number	Diff line number	Diff line change
`@@ -12,6 +12,8 @@ resource keyVault 'Microsoft.KeyVault/vaults@2022-07-01' = {`
`12`	`12`	`properties: {`
`13`	`13`	`tenantId: subscription().tenantId`
`14`	`14`	`sku: { family: 'A', name: 'standard' }`
	`15`	`+ enablePurgeProtection: true`
	`16`	`+ enableSoftDelete: true`
`15`	`17`	`accessPolicies: !empty(principalId) ? [`
`16`	`18`	`{`
`17`	`19`	`objectId: principalId`