Storage Account with Storage Service Encryption and a blob deletion retention policy
{"name": "[parameters('storageaccountname')]", "type": "microsoft.storage/storageaccounts", "apiversion": "2021-02-01", "location": "[parameters('location')]", "sku": {"name": "[parameters('storageaccountskuname')]"}, "kind": "[parameters('storageaccountkind')]"} 