Query: key_vault_key_by_key_expiration_status

select
  status,
  count(*)
from (
  select expires_at,
    case when expires_at is not null then 'enabled'
    else 'disabled'
    end status
  from
    azure_key_vault_key) as kv
group by
  status
order by
  status;