Query: cloudfront_distribution_sni_disabled

select
  'SNI Disabled' as label,
  count(*) as value,
  case count(*) when 0 then 'ok' else 'alert' end as type
from
  aws_cloudfront_distribution
where
  viewer_certificate ->> 'SSLSupportMethod' <> 'sni-only';