Creates and optionally secures a Key Vault with logging linked to a storage account.
{"type": "microsoft.keyvault/vaults", "apiversion": "2019-09-01", "name": "[parameters('keyvaultname')]", "location": "[parameters('location')]", "dependson": ["[resourceid('microsoft.compute/virtualmachines", parameters('vmname'))]"], "properties": {"enabledfordeployment": "[parameters('enabledfordeployment')]", "enabledfordiskencryption": "[parameters('enabledfordiskencryption')]", "enabledfortemplatedeployment": "[parameters('enabledfortemplatedeployment')]", "tenantid": "[subscription().tenantid]", "accesspolicies": [{"objectid": "[reference(resourceid('microsoft.compute/virtualmachines/", parameters('vmname')), "2019-07-01", "full').identity.principalid]", "tenantid": "[subscription().tenantid]", "permissions": {"keys": "[parameters('keyspermissions')]", "secrets": "[parameters('secretspermissions')]"}}], "sku": {"name": "[parameters('skuname')]", "family": "a"}, "networkacls": {"defaultaction": "allow", "bypass": "azureservices"}}} 