Skip to content

Commit 2d5fa71

Browse files
authored
Merge pull request #111786 from msmbaldwin/akv
Fixed redirect
2 parents d87bcb7 + d2cfc26 commit 2d5fa71

8 files changed

+21
-21
lines changed

.openpublishing.redirection.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -3639,7 +3639,7 @@
36393639
},
36403640
{
36413641
"source_path": "articles/key-vault/about-keys-secrets-and-certificates.md",
3642-
"redirect_url": "/azure/key-vault/index.yml",
3642+
"redirect_url": "/azure/key-vault",
36433643
"redirect_document_id": false
36443644
},
36453645
{

articles/key-vault/general/best-practices.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -40,4 +40,4 @@ Make sure you take regular back ups of your [vault](https://blogs.technet.micros
4040
## Turn on recovery options
4141

4242
1. Turn on [Soft Delete](overview-soft-delete.md)).
43-
2. Turn on purge protection if you want to guard against force deletion of the secret / vault even after soft delete is turned on.
43+
2. Turn on purge protection if you want to guard against force deletion of the secret / vault even after soft-delete is turned on.

articles/key-vault/general/customer-data.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -36,7 +36,7 @@ The following information identifies customer data within Azure Key Vault:
3636

3737
The same REST APIs, Portal experience, and SDKs used to create vaults, keys, secrets, certificates, and managed storage accounts, are also able to update and delete these objects.
3838

39-
Soft delete allows you to recover deleted data for 90 days after deletion. When using soft delete, the data may be permanently deleted prior to the 90 days retention period expires by performing a purge operation. If the vault or subscription has been configured to block purge operations, it is not possible to permanently delete data until the scheduled retention period has passed.
39+
Soft-delete allows you to recover deleted data for 90 days after deletion. When using soft-delete, the data may be permanently deleted prior to the 90 days retention period expires by performing a purge operation. If the vault or subscription has been configured to block purge operations, it is not possible to permanently delete data until the scheduled retention period has passed.
4040

4141
## Exporting customer data
4242

articles/key-vault/general/overview-soft-delete.md

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
---
2-
title: Azure Key Vault soft delete | Microsoft Docs
2+
title: Azure Key Vault soft-delete | Microsoft Docs
33
description: Soft-delete in Azure Key Vault allows you to recover deleted key vaults and key vault objects, such as keys, secrets, and certificates.
44
ms.service: key-vault
55
ms.subservice: general
@@ -12,7 +12,7 @@ ms.date: 03/19/2019
1212

1313
# Azure Key Vault soft-delete overview
1414

15-
Key Vault's soft delete feature allows recovery of the deleted vaults and vault objects, known as soft-delete. Specifically, we address the following scenarios:
15+
Key Vault's soft-delete feature allows recovery of the deleted vaults and vault objects, known as soft-delete. Specifically, we address the following scenarios:
1616

1717
- Support for recoverable deletion of a key vault
1818
- Support for recoverable deletion of key vault objects (ex. keys, secrets, certificates)
@@ -33,15 +33,15 @@ Azure Key Vaults are tracked resources, managed by Azure Resource Manager. Azure
3333

3434
When soft-delete is enabled, resources marked as deleted resources are retained for a specified period (90 days by default). The service further provides a mechanism for recovering the deleted object, essentially undoing the deletion.
3535

36-
When creating a new key vault, soft-delete is on by default. You can create a key vault without soft-delete through the [Azure CLI](soft-delete-cli.md) or [Azure Powershell](soft-delete-powershell.md). Once soft-delete is enabled on a key vault it cannot be disabled
36+
When creating a new key vault, soft-delete is on by default. You can create a key vault without soft-delete through the [Azure CLI](soft-delete-cli.md) or [Azure PowerShell](soft-delete-powershell.md). Once soft-delete is enabled on a key vault it cannot be disabled
3737

3838
The default retention period is 90 days but, during key vault creation, it is possible to set the retention policy interval to a value from 7 to 90 days through the Azure portal. The purge protection retention policy uses the same interval. Once set, the retention policy interval cannot be changed.
3939

4040
You cannot reuse the name of a key vault that has been soft-deleted until the retention period has passed.
4141

4242
### Purge protection
4343

44-
Purge protection is an optional Key Vault behavior and is **not enabled by default**. It can be turned on via [CLI](soft-delete-cli.md#enabling-purge-protection) or [Powershell](soft-delete-powershell.md#enabling-purge-protection).
44+
Purge protection is an optional Key Vault behavior and is **not enabled by default**. It can be turned on via [CLI](soft-delete-cli.md#enabling-purge-protection) or [PowerShell](soft-delete-powershell.md#enabling-purge-protection).
4545

4646
When purge protection is on, a vault or an object in the deleted state cannot be purged until the retention period has passed. Soft-deleted vaults and objects can still be recovered, ensuring that the retention policy will be followed.
4747

@@ -53,7 +53,7 @@ Permanently deleting, purging, a key vault is possible via a POST operation on t
5353

5454
Exceptions are:
5555
- When the Azure subscription has been marked as *undeletable*. In this case, only the service may then perform the actual deletion, and does so as a scheduled process.
56-
- When the --enable-purge-protection flag is enabled on the vault itself. In this case, Key Vault will wait for 90 days from when the original secret object was marked for deletion to permanently delete the object.
56+
- When the `--enable-purge-protection flag` is enabled on the vault itself. In this case, Key Vault will wait for 90 days from when the original secret object was marked for deletion to permanently delete the object.
5757

5858
### Key vault recovery
5959

@@ -67,7 +67,7 @@ At the same time, Key Vault will schedule the deletion of the underlying data co
6767

6868
### Soft-delete retention period
6969

70-
Soft deleted resources are retained for a set period of time, 90 days. During the soft-delete retention interval, the following apply:
70+
Soft-deleted resources are retained for a set period of time, 90 days. During the soft-delete retention interval, the following apply:
7171

7272
- You may list all of the key vaults and key vault objects in the soft-delete state for your subscription as well as access deletion and recovery information about them.
7373
- Only users with special permissions can list deleted vaults. We recommend that our users create a custom role with these special permissions for handling deleted vaults.

articles/key-vault/general/security-baseline.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1000,7 +1000,7 @@ https://docs.microsoft.com/azure/security-center/security-center-remediate-recom
10001000

10011001
### 7.11: Manage Azure secrets securely
10021002

1003-
**Guidance**: Use Managed Service Identity in conjunction with Azure Key Vault to simplify and secure secret management for your cloud applications. Ensure that Azure Key Vault soft delete is enabled.
1003+
**Guidance**: Use Managed Service Identity in conjunction with Azure Key Vault to simplify and secure secret management for your cloud applications. Ensure that Azure Key Vault soft-delete is enabled.
10041004

10051005
How to integrate with Azure Managed Identities:
10061006

@@ -1176,7 +1176,7 @@ How to restore Key Vault Secrets: https://docs.microsoft.com/powershell/module/a
11761176

11771177
### 9.4: Ensure protection of backups and customer managed keys
11781178

1179-
**Guidance**: Ensure that soft delete is enabled for Azure Key Vault. Soft delete allows recovery of deleted key vaults and vault objects such as keys, secrets, and certificates.
1179+
**Guidance**: Ensure that soft-delete is enabled for Azure Key Vault. Soft-delete allows recovery of deleted key vaults and vault objects such as keys, secrets, and certificates.
11801180

11811181
How to use Azure Key Vault's Soft Delete:
11821182

articles/key-vault/general/security-recommendations.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -26,7 +26,7 @@ Some of the recommendations included in this article can be automatically monito
2626

2727
| Recommendation | Comments | Security Center |
2828
|-|----|--|
29-
|Enable soft delete | [Soft delete](overview-soft-delete.md)) allows you to recover deleted vaults and vault objects | - |
29+
|Enable soft-delete | [Soft-delete](overview-soft-delete.md)) allows you to recover deleted vaults and vault objects | - |
3030
| Limit access to vault data | Follow the principle of least privilege and limit which members of your organization have access to vault data | - |
3131

3232
## Identity and access management

articles/key-vault/general/soft-delete-cli.md

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
---
2-
title: Azure Key Vault - How to use soft delete with CLI
2+
title: Azure Key Vault - How to use soft-delete with CLI
33
description: Use case examples of soft-delete with CLI code snips
44
services: key-vault
55
author: msmbaldwin
@@ -13,7 +13,7 @@ ms.author: mbaldwin
1313
---
1414
# How to use Key Vault soft-delete with CLI
1515

16-
Azure Key Vault's soft delete feature allows recovery of deleted vaults and vault objects. Specifically, soft-delete addresses the following scenarios:
16+
Azure Key Vault's soft-delete feature allows recovery of deleted vaults and vault objects. Specifically, soft-delete addresses the following scenarios:
1717

1818
- Support for recoverable deletion of a key vault
1919
- Support for recoverable deletion of key vault objects; keys, secrets, and, certificates
@@ -41,7 +41,7 @@ For more information on permissions and access control, see [Secure your key vau
4141
You enable "soft-delete" to allow recovery of a deleted key vault, or objects stored in a key vault.
4242

4343
> [!IMPORTANT]
44-
> Enabling 'soft delete' on a key vault is an irreversible action. Once the soft-delete property has been set to "true", it cannot be changed or removed.
44+
> Enabling 'soft-delete' on a key vault is an irreversible action. Once the soft-delete property has been set to "true", it cannot be changed or removed.
4545
4646
### Existing key vault
4747

@@ -226,13 +226,13 @@ When purge protection is turned on, a vault or an object in deleted state cannot
226226

227227
You can enable purge protection only if soft-delete is also enabled.
228228

229-
To turn on both soft delete and purge protection when creating a vault, use the [az keyvault create](/cli/azure/keyvault?view=azure-cli-latest#az-keyvault-create) command:
229+
To turn on both soft-delete and purge protection when creating a vault, use the [az keyvault create](/cli/azure/keyvault?view=azure-cli-latest#az-keyvault-create) command:
230230

231231
```azurecli
232232
az keyvault create --name ContosoVault --resource-group ContosoRG --location westus --enable-soft-delete true --enable-purge-protection true
233233
```
234234

235-
To add purge protection to an existing vault (that already has soft delete enabled), use the [az keyvault update](/cli/azure/keyvault?view=azure-cli-latest#az-keyvault-update) command:
235+
To add purge protection to an existing vault (that already has soft-delete enabled), use the [az keyvault update](/cli/azure/keyvault?view=azure-cli-latest#az-keyvault-update) command:
236236

237237
```azurecli
238238
az keyvault update --name ContosoVault --resource-group ContosoRG --enable-purge-protection true

articles/key-vault/general/soft-delete-powershell.md

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,7 @@ ms.author: mbaldwin
1414

1515
# How to use Key Vault soft-delete with PowerShell
1616

17-
Azure Key Vault's soft delete feature allows recovery of deleted vaults and vault objects. Specifically, soft-delete addresses the following scenarios:
17+
Azure Key Vault's soft-delete feature allows recovery of deleted vaults and vault objects. Specifically, soft-delete addresses the following scenarios:
1818

1919
- Support for recoverable deletion of a key vault
2020
- Support for recoverable deletion of key vault objects; keys, secrets, and, certificates
@@ -50,7 +50,7 @@ For more information on permissions and access control, see [Secure your key vau
5050
You enable "soft-delete" to allow recovery of a deleted key vault, or objects stored in a key vault.
5151

5252
> [!IMPORTANT]
53-
> Enabling 'soft delete' on a key vault is an irreversible action. Once the soft-delete property has been set to "true", it cannot be changed or removed.
53+
> Enabling 'soft-delete' on a key vault is an irreversible action. Once the soft-delete property has been set to "true", it cannot be changed or removed.
5454
5555
### Existing key vault
5656

@@ -266,13 +266,13 @@ When purge protection is turned on, a vault or an object in deleted state cannot
266266

267267
You can enable purge protection only if soft-delete is also enabled.
268268

269-
To turn on both soft delete and purge protection when creating a vault, use the [New-AzKeyVault](/powershell/module/az.keyvault/new-azkeyvault?view=azps-1.5.0) cmdlet:
269+
To turn on both soft-delete and purge protection when creating a vault, use the [New-AzKeyVault](/powershell/module/az.keyvault/new-azkeyvault?view=azps-1.5.0) cmdlet:
270270

271271
```powershell
272272
New-AzKeyVault -Name ContosoVault -ResourceGroupName ContosoRG -Location westus -EnableSoftDelete -EnablePurgeProtection
273273
```
274274

275-
To add purge protection to an existing vault (that already has soft delete enabled), use the [Get-AzKeyVault](/powershell/module/az.keyvault/Get-AzKeyVault?view=azps-1.5.0), [Get-AzResource](/powershell/module/az.resources/get-azresource?view=azps-1.5.0), and [Set-AzResource](/powershell/module/az.resources/set-azresource?view=azps-1.5.0) cmdlets:
275+
To add purge protection to an existing vault (that already has soft-delete enabled), use the [Get-AzKeyVault](/powershell/module/az.keyvault/Get-AzKeyVault?view=azps-1.5.0), [Get-AzResource](/powershell/module/az.resources/get-azresource?view=azps-1.5.0), and [Set-AzResource](/powershell/module/az.resources/set-azresource?view=azps-1.5.0) cmdlets:
276276

277277
```
278278
($resource = Get-AzResource -ResourceId (Get-AzKeyVault -VaultName "ContosoVault").ResourceId).Properties | Add-Member -MemberType "NoteProperty" -Name "enablePurgeProtection" -Value "true"

0 commit comments

Comments
 (0)