2
votes

I have enabled the purge protection and soft delete on key vault, now i want to disable it . Is there any way to disable purge protection ?

I have created the key vault through terraform

1

1 Answers

4
votes

It is not possible to disable Purge Protection

It is as designed, purge protection is irreversible. Otherwise hacker would be able to delete your key vault without option to recover.

Ref: https://github.com/Azure/azure-rest-api-specs/issues/8075

Also make note that soft delete will be enabled by default starting next year

Breaking Change: The ability to opt out of soft-delete will be deprecated by the end of the year and soft-delete protection will automatically be turned on for all key vaults. Azure Key Vault users and administrators should enable soft-delete on their key vaults immediately.

Ref: https://docs.microsoft.com/en-us/azure/key-vault/general/soft-delete-change