Docs improvements

backend/src/services/app-connection/app-connection-fns.ts

@@ -150,7 +150,12 @@ const SECRET_SCANNING_APP_CONNECTION_MAP = Object.fromEntries(
 );
 
 // scott: ideally this would be derived from a utilized map like the above
-const PKI_APP_CONNECTIONS = [AppConnection.AWS, AppConnection.Cloudflare, AppConnection.AzureADCS];
+const PKI_APP_CONNECTIONS = [
+  AppConnection.AWS,
+  AppConnection.Cloudflare,
+  AppConnection.AzureADCS,
+  AppConnection.AzureKeyVault
+];
 
 export const listAppConnectionOptions = (projectType?: ProjectType) => {
   return [

backend/src/services/pki-sync/azure-key-vault/azure-key-vault-pki-sync-constants.ts

@@ -43,7 +43,7 @@ export const AZURE_KEY_VAULT_PKI_SYNC_LIST_OPTION = {
   connection: AppConnection.AzureKeyVault,
   destination: PkiSync.AzureKeyVault,
   canImportCertificates: false,
-  canRemoveCertificates: true,
+  canRemoveCertificates: false,
   defaultCertificateNameSchema: "Infisical-PKI-Sync-{{certificateId}}",
   forbiddenCharacters: AZURE_KEY_VAULT_CERTIFICATE_NAMING.FORBIDDEN_CHARACTERS,
   allowedCharacterPattern: AZURE_KEY_VAULT_CERTIFICATE_NAMING.ALLOWED_CHARACTER_PATTERN,

backend/src/services/pki-sync/azure-key-vault/azure-key-vault-pki-sync-schemas.ts

@@ -70,5 +70,5 @@ export const AzureKeyVaultPkiSyncListItemSchema = z.object({
   connection: z.literal(AppConnection.AzureKeyVault),
   destination: z.literal(PkiSync.AzureKeyVault),
   canImportCertificates: z.literal(false),
-  canRemoveCertificates: z.literal(true)
+  canRemoveCertificates: z.literal(false)
 });