Query: kms_key_rotation_status

select
  rotation_status,
  count(*)
from (
  select
    case when key_rotation_enabled then
      'enabled'
    else
      'disabled'
    end rotation_status
  from
    aws_kms_key
  where
    key_manager = 'CUSTOMER') as t
group by
  rotation_status
order by
  rotation_status desc;