Skip to main content
Version: 2.2.1-preview

MT.1065 - Soft Delete should be enabled on all Recovery Services Vaults

Beerd VeldmanLukas GoslingSam ErdeJohn Flores
Contributed by Beerd Veldman with 3 co-contributorsAll contributors →

Overview​

Soft delete ensures that backup items and recovery points are retained for a period after deletion. This protects against accidental or malicious deletion of backups.

Ensure that all Recovery Services Vaults across all subscriptions have soft delete enabled.

Remediation action​

To enable soft delete on a Recovery Services Vault:

  1. Go to the Azure portal.
  2. Navigate to Recovery Services Vaults
  3. Select the vault and go to Properties
  4. Under Soft Delete, ensure it is set to Enabled

Note: New vaults typically have soft delete enabled by default.

Test Metadata​

FieldValue
Test IDMT.1065
SeverityHigh
SuiteMaester
CategoryBackup
PowerShell testTest-MtVaultSoftDelete
TagsAzure, Backup, Maester, MT.1065

Source​

  • Pester test: tests/Maester/Azure/Test-MtVaultSoftDelete.Tests.ps1
  • PowerShell source: powershell/public/maester/azure/Test-MtVaultSoftDelete.ps1