diff --git a/terraform/monitor-diagnostics.tf b/terraform/monitor-diagnostics.tf
index a11778731..85f2f6831 100644
--- a/terraform/monitor-diagnostics.tf
+++ b/terraform/monitor-diagnostics.tf
@@ -9,6 +9,7 @@ resource "azurerm_monitor_diagnostic_setting" "getanid-keyvault-diagnostics" {
 
     retention_policy {
       enabled = local.keyvault_logging_enabled
+      days    = 0 # unlimited
     }
   }