Query: compute_virtual_machine_scale_set_by_host_encryption_status

select
  encryption,
  count(*)
from (
  select virtual_machine_security_profile -> 'encryptionAtHost',
    case when virtual_machine_security_profile -> 'encryptionAtHost' <> 'true' or virtual_machine_security_profile -> 'encryptionAtHost' is null then 'unencrypted'
    else 'encrypted'
    end encryption
  from
    azure_compute_virtual_machine_scale_set) as vmss
group by
  encryption
order by
  encryption;