Query: kms_cmk_rotation_disabled_count

select
  count(*) as value,
  'CMK Rotation Disabled' as label,
  case count(*) when 0 then 'ok' else 'alert' end as "type"
from
  aws_kms_key
where
  not key_rotation_enabled
  and key_manager = 'CUSTOMER';