Enable purge protection for App Configuration stores

[BernieWhite]

Rule request

Suggested rule change

App Configuration supports purge protection to extend the protection provided by soft-delete. Purge protection limits data loss causes by accidental and malicious purges of deleted configuration stores by enforcing an mandatory retention interval.

This feature only applies to Standard SKU configuration stores. Free configuration stores should be ignored by this rule.

This is enabled by setting the properties.enablePurgeProtection property to true.

Applies to the following

The rule applies to the following:

• Resource type: Microsoft.AppConfiguration/configurationStores

Additional context

Azure deployment reference Purge protection

Related rules include:

• https://azure.github.io/PSRule.Rules.Azure/en/rules/Azure.KeyVault.PurgeProtect/