Skip to content

Update Key Vault to Support Delete Protection #1349

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 11 commits into
base: dev
Choose a base branch
from
1 change: 1 addition & 0 deletions docs/_resources/changelog.md
Original file line number Diff line number Diff line change
Expand Up @@ -335,6 +335,7 @@ This release is a minor patch to update documentation and fix Power BI storage r
> - All data processing now happens within a virtual network.
> - Added param to disable external access to Azure Data Lake and Azure Data Explorer.
> - Added param to specify subnet range of virtual network - minimum size = /26
> - Enabled Purge protection for keyvault
> 1. Support for storage account infrastructure encryption.
> 1. Published a [schema file](https://aka.ms/finops/hubs/settings-schema) for the hub settings.json file.
>
Expand Down
1 change: 1 addition & 0 deletions src/templates/finops-hub/modules/keyVault.bicep
Original file line number Diff line number Diff line change
Expand Up @@ -77,6 +77,7 @@ resource keyVault 'Microsoft.KeyVault/vaults@2023-02-01' = {
enableSoftDelete: true
softDeleteRetentionInDays: 90
enableRbacAuthorization: false
enablePurgeProtection: true
createMode: 'default'
tenantId: subscription().tenantId
accessPolicies: formattedAccessPolicies
Expand Down