Skip to content

Commit b93b193

Browse files
authored
Merge pull request #102545 from ravijan/patch-14
Update key-vault-ovw-soft-delete.md
2 parents 48f53d4 + b94bc61 commit b93b193

File tree

1 file changed

+11
-3
lines changed

1 file changed

+11
-3
lines changed

articles/key-vault/key-vault-ovw-soft-delete.md

Lines changed: 11 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -31,14 +31,22 @@ Azure Key Vaults are tracked resources, managed by Azure Resource Manager. Azure
3131

3232
With this feature, the DELETE operation on a key vault or key vault object is a soft-delete, effectively holding the resources for a given retention period (90 days), while giving the appearance that the object is deleted. The service further provides a mechanism for recovering the deleted object, essentially undoing the deletion.
3333

34-
Soft-delete is an optional Key Vault behavior and is **not enabled by default** in this release. It can be turned on via [CLI](key-vault-soft-delete-cli.md) or [Powershell](key-vault-soft-delete-powershell.md).
34+
Soft-delete is now on by default for newly created key vaults. It can be disabled through the [Azure CLI](key-vault-soft-delete-cli.md) or [Azure Powershell](key-vault-soft-delete-powershell.md).
3535

36-
### Purge protection
36+
The default retention period is 90 days, but it is possible to set the retention policy interval to a value from 7 to 90 days through the Azure portal. The purge protection retention policy uses the same interval.
37+
38+
Once soft-delete has been set on a key vault it cannot be disabled, and the retention policy interval cannot be changed.
39+
40+
You cannot reuse the name of a key vault that has been soft-deleted until the retention period has passed.
3741

38-
When purge protection is on, a vault or an object in deleted state cannot be purged until the retention period of 90 days has passed. These vaults and objects can still be recovered, assuring customers that the retention policy will be followed.
42+
### Purge protection
3943

4044
Purge protection is an optional Key Vault behavior and is **not enabled by default**. It can be turned on via [CLI](key-vault-soft-delete-cli.md#enabling-purge-protection) or [Powershell](key-vault-soft-delete-powershell.md#enabling-purge-protection).
4145

46+
When purge protection is on, a vault or an object in the deleted state cannot be purged until the retention period has passed. Soft-deleted vaults and objects can still be recovered, ensuring that the retention policy will be followed.
47+
48+
The default retention period is 90 days, but it is possible to set the retention policy interval to a value from 7 to 90 days through the Azure portal. Once the retention policy interval is set and saved it cannot be changed for that vault.
49+
4250
### Permitted purge
4351

4452
Permanently deleting, purging, a key vault is possible via a POST operation on the proxy resource and requires special privileges. Generally, only the subscription owner will be able to purge a key vault. The POST operation triggers the immediate and irrecoverable deletion of that vault.

0 commit comments

Comments
 (0)