Query: cloudfront_distribution_encryption_in_transit_disabled

select
  'Encryption in Transit Disabled' as label,
  count(*) as value,
  case count(*) when 0 then 'ok' else 'alert' end as type
from
  aws_cloudfront_distribution
where
  default_cache_behavior ->> 'ViewerProtocolPolicy' = 'allow-all';