AzPolicyAdvertizer

last sync: 2023-Jun-19 17:45:01 UTC

Community Policy definition

Enable soft-delete and purge protection on Key Vaults

Name Enable soft-delete and purge protection on Key Vaults
Community-Policy GitHub
Id keyvault_deploy-soft-delete-and-purge-protection
Version n/a
details on versioning
Category Key Vault
Microsoft docs
Description This Policy will enable soft-delete and purge protection on all Key Vaults.
Mode All
Type Custom Community
Effect Fixed
deployIfNotExists
Used RBAC Role
Role Name Role Id
Key Vault Contributor f25e0fa2-a7c8-4377-a976-54943a77a395
Rule Aliases IF (2)
Alias Namespace ResourceType DefaultPath Modifiable
Microsoft.KeyVault/vaults/enablePurgeProtection Microsoft.KeyVault vaults properties.enablePurgeProtection true
Microsoft.KeyVault/vaults/enableSoftDelete Microsoft.KeyVault vaults properties.enableSoftDelete true
THEN-ExistenceCondition (2)
Alias Namespace ResourceType DefaultPath Modifiable
Microsoft.KeyVault/vaults/enablePurgeProtection Microsoft.KeyVault vaults properties.enablePurgeProtection true
Microsoft.KeyVault/vaults/enableSoftDelete Microsoft.KeyVault vaults properties.enableSoftDelete true
Rule ResourceTypes IF (1)
Microsoft.KeyVault/vaults
THEN-Deployment (1)
Microsoft.KeyVault/vaults
JSON