Query: key_vault_purge_protection_status

select
  'Purge Protection' as label,
  case when purge_protection_enabled then 'Enabled' else 'Disabled' end as value,
  case when purge_protection_enabled then 'ok' else 'alert' end as type
from
  azure_key_vault
where
  lower(id) = $1
  and subscription_id = split_part($1, '/', 3);