github.com/khulnasoft-lab/defsec@v1.0.5-0.20230827010352-5e9f46893d95/avd_docs/azure/keyvault/AVD-AZU-0016/Terraform.md (about) 1 2 Enable purge protection for key vaults 3 4 ```hcl 5 resource "azurerm_key_vault" "good_example" { 6 name = "examplekeyvault" 7 location = azurerm_resource_group.good_example.location 8 enabled_for_disk_encryption = true 9 soft_delete_retention_days = 7 10 purge_protection_enabled = true 11 } 12 13 ``` 14 15 #### Remediation Links 16 - https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/key_vault#purge_protection_enabled 17