Policy Setting: Azure > Key Vault > Vault > Purge Protection

resource "turbot_policy_setting" "azure_keyvault_vault_purge_protection" {
  resource = turbot_policy_pack.main.id
  type     = "tmod:@turbot/azure-keyvault#/policy/types/vaultPurgeProtection"
  note     = "Azure CIS v2.0.0 - Control: 8.5"
  value    = "Check: Purge Protection Enabled"
  # value    = "Enforce: Enable Purge Protection"
}