Query: storage_bucket_customer_managed_encryption

select
  count(*) as value,
  'Customer Managed Encryption' as label
from
  gcp_storage_bucket
where
  default_kms_key_name is not null;