Query: ibm_kms_root_key_rotation_disabled_count

 select
  count(*) as value,
  'Root Key Rotation Disabled' as label,
  case count(*) when 0 then 'ok' else 'alert' end as "type"
from
  ibm_kms_key
where
  rotation_policy = '{}'
  and not extractable
  and state <> '5';