---
type: post-synth-check
title: AZR016
description: Key Vault soft-delete not enabled — enable to protect against accidental deletion
id: AZR016
severity: error
category: post-synth
lexicon: azure
docs: https://intentius.io/chant/lexicons/azure/rules/
---
Key Vault soft-delete not enabled — enable to protect against accidental deletion

## Applies to

- [certificates](/types/certificates.md)
- [KeyVault](/types/KeyVault.md)
- [resources](/types/resources.md)
- [secrets](/types/secrets.md)
- [vaults](/types/vaults.md)