Query: key_vault_purge_protection_enabled_count

select
  count(*) as value,
  'Purge Protection Disabled' as label,
  case when count(*) > 0 then 'alert' else 'ok' end as "type"
from
  azure_key_vault
where
  not purge_protection_enabled;