Query: kms_key_rotation_enabled

select
  'Key Rotation' as label,
  case
    when key_rotation_enabled is null then 'N/A'
    when key_rotation_enabled then 'Enabled'
    else 'Disabled'
  end as value,
  case
    when key_rotation_enabled
    or key_rotation_enabled is null then 'ok'
    else 'alert'
  end as type
from
  aws_kms_key
where
  arn = $1
  and region = split_part($1, ':', 4)
  and account_id = split_part($1, ':', 5);