Query: ibm_kms_root_key_rotation_enabled

select
  'Root Key Rotation' as label,
  case
    when extractable then 'N/A'
    when not extractable and rotation_policy = '{}' then 'Disabled' else 'Enabled' end as value,
  case when not extractable and rotation_policy = '{}' then 'alert' else 'ok' end as type
from
  ibm_kms_key
where
  crn = $1;