Azure Key Vault is vital for most organizations and the security controls around it must be tightened as much as possible. There are two features available during the creation of the resource that the cloud administrator should be aware of. They are purge protection and soft-delete. When we have those options configured, we cannot reuse Key Vault and Key Vault objects (secrets/keys and certificates) names before the period defined on the policy is reached.
The soft-delete allows the restore of entire vaults and vault objects for 90 days (maximum numbers of days).
The purge protection is not enabled by default, but it forces that any deleted object cannot be purged from Azure, and they will remain in that status for 90 days (maximum number of days).
The process to restore is done through PowerShell and there is no functionality at this time in the Azure Portal.
More Quick Tips articles
- Removing Azure root-level permissions using PowerShell
- Delete Microsoft Teams cache fast with this PowerShell one-liner
- Azure Charts: If you’re not using this cool feature, you should be
- Azure Portal Managed View: Finally, a site for sore eyes
- Reading text files the easy way with PowerShell and Linux bash shell