resource "random_string" "random" {
  length  = 15
  upper   = false
  special = false
  lifecycle {
    ignore_changes = [length]
  }
}

resource "azurerm_key_vault" "keyvault" {
  name                        = "k${random_string.random.result}" # avoid start with number
  location                    = var.location
  resource_group_name         = azurerm_resource_group.rg.name
  enabled_for_disk_encryption = true
  tenant_id                   = data.azurerm_client_config.current.tenant_id
  soft_delete_retention_days  = 7
  purge_protection_enabled    = false
  enable_rbac_authorization   = true

  sku_name = "standard"
  lifecycle {
    ignore_changes = [name]
  }
}