Storage Account with Storage Service Encryption and a blob deletion retention policy
{"apiversion": "2021-04-01", "type": "microsoft.storage/storageaccounts", "name": "[parameters('newstorageaccountname')]", "location": "[parameters('location')]", "sku": {"name": "[variables('storageaccounttype')]"}} 