Control: Azure > Key Vault > Vault > Purge Protection

Configure Purge Protection for the Azure > Key Vault > Vault. Enabling Purge Protection will enforce a mandatory retention period and prevent the permanent deletion of key vaults or secrets prior to the end of the retention period.

Resource Types

This control targets the following resource types:

Azure > Key Vault > Vault

Primary Policies

The following policies can be used to configure this control:

Purge Protection

In Your Workspace

Developers

Control Type URI

tmod:@turbot/azure-keyvault#/control/types/vaultPurgeProtection

Category URI

tmod:@turbot/turbot#/control/categories/resourceDataProtection

GraphQL

query controlType(id: "tmod:@turbot/azure-keyvault#/control/types/vaultPurgeProtection") { … }

query controls(filter: "controlTypeId:'tmod:@turbot/azure-keyvault#/control/types/vaultPurgeProtection'") { … }

CLI

Get Controls

turbot graphql controls --filter "controlTypeId:tmod:@turbot/azure-keyvault#/control/types/vaultPurgeProtection"