Query: lambda_function_by_encryption_status

select
  encryption_status,
  count(*)
from (
  select
    case when kms_key_arn is not null then
      'enabled'
    else
      'disabled'
    end encryption_status
  from
    aws_lambda_function) as t
group by
  encryption_status
order by
  encryption_status desc;