github.com/khulnasoft-lab/defsec@v1.0.5-0.20230827010352-5e9f46893d95/avd_docs/azure/keyvault/AVD-AZU-0016/docs.md (about) 1 2 Purge protection is an optional Key Vault behavior and is not enabled by default. 3 4 Purge protection can only be enabled once soft-delete is enabled. It can be turned on via CLI or PowerShell. 5 6 ### Impact 7 Keys could be purged from the vault without protection 8 9 <!-- DO NOT CHANGE --> 10 {{ remediationActions }} 11 12 ### Links 13 - https://docs.microsoft.com/en-us/azure/key-vault/general/soft-delete-overview#purge-protection 14 15