Query: dynamodb_table_customer_managed_key_encryption

select
  count(*) as value,
  'Encrypted with CMK' as label
from
  aws_dynamodb_table as t,
  aws_kms_key as k
where
  k.arn = t.sse_description ->> 'KMSMasterKeyArn'
  and sse_description is not null
  and sse_description ->> 'SSEType' = 'KMS'
  and k.key_manager = 'CUSTOMER';