Storage Account with Storage Service Encryption and a blob deletion retention policy
{"type": "microsoft.storage/storageaccounts", "name": "[variables('vhdstoragename')]", "apiversion": "2021-02-01", "location": "[parameters('location')]", "tags": {"displayname": "storageaccount"}, "sku": {"name": "[variables('vhdstoragetype')]"}} 