Query: cloudfront_distribution_encryption_in_transit_status

select
  eit_status,
  count(*)
from
  (
    select
      case
        when default_cache_behavior ->> 'ViewerProtocolPolicy' = 'allow-all' then 'disabled'
        else 'enabled'
      end as eit_status
    from
      aws_cloudfront_distribution
  ) as d
group by
  eit_status
order by
  eit_status;