github.com/aquasecurity/trivy-iac@v0.8.1-0.20240127024015-3d8e412cf0ab/avd_docs/azure/keyvault/AVD-AZU-0016/docs.md (about) 1 2 Purge protection is an optional Key Vault behavior and is not enabled by default. 3 4 Purge protection can only be enabled once soft-delete is enabled. It can be turned on via CLI or PowerShell. 5 6 ### Impact 7 Keys could be purged from the vault without protection 8 9 <!-- DO NOT CHANGE --> 10 {{ remediationActions }} 11 12 ### Links 13 - https://docs.microsoft.com/en-us/azure/key-vault/general/soft-delete-overview#purge-protection 14 15