Query: cloudfront_distribution_encryption_in_transit_status

select
  eit_status,
  count(*)
from (
  select
    case when default_cache_behavior ->> 'ViewerProtocolPolicy' = 'allow-all' then 'disabled' else 'enabled' end as eit_status
  from
    aws_cloudfront_distribution
) as d
group by
  eit_status
order by
  eit_status;