Query: sns_topic_encryption_status

select
  case when kms_master_key_id is not null then 'Enabled' else 'Disabled' end as value,
  'Encryption' as label,
  case when kms_master_key_id is not null then 'ok' else 'alert' end as "type"
from
  aws_sns_topic
where
  topic_arn = $1
  and account_id = split_part($1, ':', 5)
  and region = split_part($1, ':', 4);