diff --git a/deploy/modules/keyVault.bicep b/deploy/modules/keyVault.bicep
index 078ba58..1f9ab5e 100644
--- a/deploy/modules/keyVault.bicep
+++ b/deploy/modules/keyVault.bicep
@@ -34,7 +34,9 @@ resource keyVault 'Microsoft.KeyVault/vaults@2022-07-01' = {
   name: keyVaultName
   location: location
   properties: {
+    enableSoftDelete: true
     enablePurgeProtection: true
+    softDeleteRetentionInDays: 7
     enableRbacAuthorization: true
     tenantId: tenantId
     sku: {