---
type: post-synth-check
title: AZR017
description: Key Vault purge protection not enabled — enable to prevent permanent deletion during retention period
id: AZR017
severity: error
category: post-synth
lexicon: azure
docs: https://intentius.io/chant/lexicons/azure/rules/
---
Key Vault purge protection not enabled — enable to prevent permanent deletion during retention period

## Applies to

- [KeyVault](/types/KeyVault.md)
- [resources](/types/resources.md)
- [vaults](/types/vaults.md)