Query: s3_bucket_by_default_encryption_status

with default_encryption as (
  select
    case when server_side_encryption_configuration is not null then 'enabled' else 'disabled'
    end as visibility
  from
    aws_s3_bucket
)
select
  visibility,
  count(*)
from
  default_encryption
group by
  visibility;