Control: WorkSpaces root and user volume encryption should be enabled

powerpipe control run aws_compliance.control.workspaces_workspace_volume_encryption_enabled

powerpipe login
powerpipe control run aws_compliance.control.workspaces_workspace_volume_encryption_enabled --share

select
  arn as resource,
  case
    when user_volume_encryption_enabled and root_volume_encryption_enabled then 'ok'
    else 'alarm'
  end as status,
  case
    when user_volume_encryption_enabled and root_volume_encryption_enabled then title || ' user and root volume encryption enabled.'
    else
      case
        when not user_volume_encryption_enabled and not root_volume_encryption_enabled then title || ' user and root volume encryption disabled.'
        when not root_volume_encryption_enabled then title || ' root volume encryption disabled.'
        else  title || ' user volume encryption disabled.'
      end
  end as reason
  
  , region, account_id
from
  aws_workspaces_workspace;