Control: Key vaults should have purge protection enabled
Malicious deletion of a key vault can lead to permanent data loss. A malicious insider in your organization can potentially delete and purge key vaults. Purge protection protects you from insider attacks by enforcing a mandatory retention period for soft deleted key vaults. No one inside your organization or Microsoft will be able to purge your key vaults during the soft delete retention period.
Run the control in your terminal:
steampipe check terraform_azure_compliance.control.keyvault_purge_protection_enabled
Snapshot and share results via Steampipe Cloud:
steampipe loginsteampipe check --share terraform_azure_compliance.control.keyvault_purge_protection_enabled
This control uses a named query:keyvault_purge_protection_enabled