Query: key_vault_by_purge_protection_status

select
  status,
  count(*)
from (
  select purge_protection_enabled,
    case when purge_protection_enabled then 'enabled'
    else 'disabled'
    end status
  from
    azure_key_vault) as kv
group by
  status
order by
  status;