We deploy the Enterprise scale landing zone Azure policy best practices, included in that is a policy for KeyVault guardrails that prevents key vaults from being deployed without Purge Protection enabled.
Can your deployment be amended to turn purge protection on for the keyvault that Nerdio creates, as this currently fails in these deployments until we toggle the policy off. (Then we have to turn the policy back on afterwards).
Comments (0 comments)