Set BICEP Key vault enableSoftDelete to false

[pradorodriguez]

Recommendation: Set BICEP Key vault enableSoftDelete to false Why: If customer wants to redeploy, newer deployments will fail due to the existence of soft deleted Key Vaults. BICEP: https://learn.microsoft.com/en-us/azure/templates/microsoft.keyvault/vaults?pivots=deployment-language-bicep#vaultproperties Parameter: enableSoftDelete

[scottroot-msft]

in the meantime...as a workaround, during the deprovisioning, you can encourage users to run: azd down --force --purge which should take care of anything marked for soft-deletion without intervention.

[placerda]

Many customers have "Key vaults should have soft delete enabled" policy, causing errors if we set this false.

https://learn.microsoft.com/en-us/azure/defender-for-cloud/policy-reference#security-centers-default-initiative-azure-security-benchmark