Query: rds_db_instance_logging_disabled_count

with logging_stat as (
  select
    db_instance_identifier
  from
    aws_rds_db_instance
  where
    ( engine like any (array ['mariadb', '%mysql']) and enabled_cloudwatch_logs_exports ?& array ['audit','error','general','slowquery'] ) or
    ( engine like any (array['%postgres%']) and enabled_cloudwatch_logs_exports ?& array ['postgresql','upgrade'] ) or
    ( engine like 'oracle%' and enabled_cloudwatch_logs_exports ?& array ['alert','audit', 'trace','listener'] ) or
    ( engine = 'sqlserver-ex' and enabled_cloudwatch_logs_exports ?& array ['error'] ) or
    ( engine like 'sqlserver%' and enabled_cloudwatch_logs_exports ?& array ['error','agent'] )
)
select
  count(*) as value,
  'Logging Disabled' as label,
  case count(*) when 0 then 'ok' else 'alert' end as "type"
from
  aws_rds_db_instance
where
  db_instance_identifier not in (select db_instance_identifier from logging_stat);