Skip to content

Add exists condition for property containerDeleteRetentionPolicy.enabled#528

Merged
Joshua-Donovan merged 1 commit into
Azure:mainfrom
armanhk:fix/container-soft-delete
Mar 25, 2026
Merged

Add exists condition for property containerDeleteRetentionPolicy.enabled#528
Joshua-Donovan merged 1 commit into
Azure:mainfrom
armanhk:fix/container-soft-delete

Conversation

@armanhk

@armanhk armanhk commented Mar 24, 2026

Copy link
Copy Markdown
Contributor

When a storage account is created without container soft delete enabled, the property containerDeleteRetentionPolicy does not exist in the ARM template for the blobServices resource. Testing the policy resulted in containers within Storage Accounts without container soft delete enabled showing up as compliant.

@armanhk

armanhk commented Mar 24, 2026

Copy link
Copy Markdown
Contributor Author

@microsoft-github-policy-service agree

@Joshua-Donovan

Copy link
Copy Markdown
Collaborator

Repro'd existing Policy Definition and fix.

Existing -> Compliant shown for non-blob container soft delete configured as described.
Fix -> Non-Compliant shown for non-blob container soft delete configured.

@Joshua-Donovan Joshua-Donovan self-assigned this Mar 25, 2026
@Joshua-Donovan Joshua-Donovan self-requested a review March 25, 2026 17:56

@Joshua-Donovan Joshua-Donovan left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Fix is working correctly in my testing.

@Joshua-Donovan Joshua-Donovan merged commit 32b29c7 into Azure:main Mar 25, 2026
2 of 3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants