feat: Add deletion protection to blob container and account

wandb · Sep 21, 2024 · 89d9ba0 · 89d9ba0
1 parent 1020ee1
commit 89d9ba0
Showing 1 changed file with 12 additions and 0 deletions.
diff --git a/modules/secure_storage_connector/main.tf b/modules/secure_storage_connector/main.tf
@@ -36,6 +36,18 @@ module "storage" {
   blob_container_name = var.namespace
 
   deletion_protection = var.deletion_protection
+
+  blob_properties = {
+    delete_retention_policy = {
+      enabled = var.deletion_protection
+      days    = 365
+    }
+
+    container_delete_retention_policy = {
+      enabled = var.deletion_protection
+      days = 7
+    }
+  }
 }
 
 resource "azurerm_role_assignment" "account" {