Query: key_vault_by_public_network_access_status

select
  status,
  count(*)
from (
  select network_acls,
    case when network_acls is null or network_acls ->> 'defaultAction' != 'Deny' then 'enabled'
    else 'disabled'
    end status
  from
    azure_key_vault) as kv
group by
  status
order by
  status;