Query: virtual_network_ddos_protection_enabled

select
  count(*) as value,
  'DDoS Protection Disabled' as label,
  case
    count(*)
    when 0 then 'ok'
    else 'alert'
  end as type
from
  azure_virtual_network
where
  enable_ddos_protection is not true;