Query: Key vaults should have soft delete enabled

Description

Deleting a key vault without soft delete enabled permanently deletes all secrets, keys, and certificates stored in the key vault. Accidental deletion of a key vault can lead to permanent data loss. Soft delete allows you to recover an accidentally deleted key vault for a configurable retention period.

Query

Tables used in this query:

• azure_key_vault
• azure_subscription

Controls using this query:

• Key vaults should have soft delete enabled

SQL