Key Vault has soft delete and purge protection enabled

resource "azurerm_key_vault" "<example_resource_name>" {
  name                = "<example_resource_name>"
  location            = "<location>"
  resource_group_name = "<resource_group_name>"
  tenant_id           = "<tenant_id>"
  sku_name            = "standard"

  soft_delete_enabled      = true  # Critical: enables soft delete
  purge_protection_enabled = true  # Critical: enables purge protection
}

// Enable soft delete and purge protection on an existing/new Key Vault
resource kv 'Microsoft.KeyVault/vaults@2023-07-01' = {
  name: '<example_resource_name>'
  location: '<location>'
  properties: {
    tenantId: '<tenant_id>'
    sku: { name: 'standard' }
    enableSoftDelete: true        // Critical: ensures soft delete is enabled
    enablePurgeProtection: true   // Critical: prevents permanent purge during retention
  }
}