We deploy the Enterprise scale landing zone Azure policy best practices, included in that is a policy for KeyVault guardrails that prevents key vaults from being deployed without Purge Protection enabled.
Can your deployment be amended to turn purge protection on for the keyvault that Nerdio creates, as this currently fails in these deployments until we toggle the policy off. (Then we have to turn the policy back on afterwards).
Hi Paul,
Thanks for reaching out and apologies for the delay in response.
Purge protection can be enabled at any time for Nerdio Manager key vaults, that is absolutely fine.
If the request is to change the current behaviour and enable this as a default deployment method or new MSP installs and account provisioning, this would need to be raised a feature request using the following link - Recently Launched - Nerdio Manager for MSP Roadmap | Product Roadmap.
Thanks!
Ben Sadler, Team Lead (EMEA) | Customer Support
Please sign in to leave a comment.
Comments (1 comment)