Skip to main content
Version: 2.1.1-preview

MT.1065 - Soft Delete should be enabled on all Recovery Services Vaults

Overview​

Soft delete ensures that backup items and recovery points are retained for a period after deletion. This protects against accidental or malicious deletion of backups.

Ensure that all Recovery Services Vaults across all subscriptions have soft delete enabled.

Remediation action:​

To enable soft delete on a Recovery Services Vault:

  1. Go to the Azure portal: https://portal.azure.com
  2. Navigate to Recovery Services Vaults
  3. Select the vault and go to Properties
  4. Under Soft Delete, ensure it is set to Enabled

Note: New vaults typically have soft delete enabled by default.

Test Metadata​

FieldValue
Test IDMT.1065
SeverityHigh
SuiteMaester
CategoryBackup
PowerShell testTest-MtVaultSoftDelete
TagsAzure, Backup, MT.1065

Source​

  • Pester test: tests/Maester/Azure/Test-MtVaultSoftDelete.Tests.ps1
  • PowerShell source: powershell/public/maester/azure/Test-MtVaultSoftDelete.ps1