Query: virtual_network_ddos_protection_enabled

select
  count(*) as value,
  'DDoS Protection Disabled' as label,
  case count(*) when 0 then 'ok' else 'alert' end as type
from
  azure_virtual_network
where
  enable_ddos_protection is not true;