Azure Compliance ControlsAzure Storage
Azure file shares should have soft delete enabled
Azure Storage file shares should have soft delete with a retention period (days). The check determines if the storage account's file service has this setting enabled. Soft delete allows recovery of data mistakenly deleted by an application or user.
What this control checks
File service has soft delete enabled with a retention period (days) for file shares
Framework mappings
The clauses this control is mapped to in each framework.
- 10.1.1 Ensure soft delete for Azure File Shares is Enabled
- 9.1.1 Ensure soft delete for Azure File Shares is Enabled
RBI Cyber Security Framework for UCBs
- Annex I (12)
- PI-03.02B The deletion procedures prevent recovery by state-of-the-art forensic means.
- 164.308(a)(7)(i) Contingency plan
- 164.308(a)(7)(ii)(A) Data backup plan
Related controls
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
storage_account_file_share_soft_delete_enabled - Powerpipe Control:
azure_compliance.control.storage_account_file_share_soft_delete_enabled - Prowler Check:
storage_ensure_file_shares_soft_delete_is_enabled - KICS Query:
54087baa-8719-48a8-8460-9cc0962117aa
Last reviewed: 2026-10-15