Storage Account with Storage Service Encryption and a blob deletion retention policy
{"type": "microsoft.storage/storageaccounts", "name": "[parameters('newstorageaccountname')]", "apiversion": "2015-05-01-preview", "location": "[parameters('location')]", "properties": {"accounttype": "standard_lrs"}} 