Skip to content

[KeyVault] Support for soft-delete on/off/null as a one time operation #10555

@dingmeng-xue

Description

@dingmeng-xue

Description of the new feature

Keyvault team are changing the default behavior that when creating a new keyvault, it's soft-delete is on.
We need to make sure:

  • The default behavior remains the same (soft delete is off) so as to keep it compatible
  • Provide a one-time operation to enable soft delete (this cannot be undone)

Proposed implementation details (optional)

Since the requirement is changing a property of the keyvault resource, idealy we should add an optional parameter [-EnableSoftDelete] to the Update-AzKeyVault cmdlet, but that cmdlet does not exist (only get- new- remove-), so we might need to add a update- cmdlet.

  • .Net SDK
    • Update api version
    • Write scenario tests
  • PowerShell
    • Utilize new SDK
    • Keep the current behavior of New-AzKeyVault
    • A new cmdlet: Update-AzKeyVault
    • Tests

Metadata

Metadata

Assignees

Labels

Type

No type

Projects

No projects

Relationships

None yet

Development

No branches or pull requests

Issue actions