Storage Account with Storage Service Encryption and a blob deletion retention policy
{"type": "microsoft.storage/storageaccounts", "name": "[variables('jumpboxsaname')]", "location": "[parameters('location')]", "apiversion": "2021-02-01", "sku": {"name": "[parameters('storageaccountskuname')]"}, "kind": "[parameters('storageaccountkind')]"} 