Query: compute_virtual_machine_by_host_encryption_status

select
  encryption,
  count(*)
from (
  select security_profile -> 'encryptionAtHost',
    case when security_profile -> 'encryptionAtHost' <> 'true' or security_profile -> 'encryptionAtHost' is null then 'unencrypted'
    else 'encrypted'
    end encryption
  from
    azure_compute_virtual_machine) as vm
group by
  encryption
order by
  encryption;