Query: cloudfront_distribution_field_level_encryption

select
  'Field Level Encryption' as label,
  case when default_cache_behavior ->> 'FieldLevelEncryptionId' = '' then 'Disabled' else 'Enabled' end as value,
  case when default_cache_behavior ->> 'FieldLevelEncryptionId' = '' then 'alert' else 'ok' end as type
from
  aws_cloudfront_distribution
where
  arn = $1
  and account_id = split_part($1,':',5);