Search code examples
azureterraformazure-keyvault

How can we disable Purge Protection in Key vault?


I have enabled the purge protection and soft delete on key vault, now i want to disable it . Is there any way to disable purge protection ?

I have created the key vault through terraform


Solution

  • It is not possible to disable Purge Protection

    It is as designed, purge protection is irreversible. Otherwise hacker would be able to delete your key vault without option to recover.

    Ref: https://github.com/Azure/azure-rest-api-specs/issues/8075

    Also make note that soft delete will be enabled by default starting next year

    Breaking Change: The ability to opt out of soft-delete will be deprecated by the end of the year and soft-delete protection will automatically be turned on for all key vaults. Azure Key Vault users and administrators should enable soft-delete on their key vaults immediately.

    Ref: https://learn.microsoft.com/en-us/azure/key-vault/general/soft-delete-change