Query: cloudfront_distribution_field_level_encryption

select
  'Field Level Encryption' as label,
  case
    when default_cache_behavior ->> 'FieldLevelEncryptionId' = '' then 'Disabled'
    else 'Enabled'
  end as value,
  case
    when default_cache_behavior ->> 'FieldLevelEncryptionId' = '' then 'alert'
    else 'ok'
  end as type
from
  aws_cloudfront_distribution
where
  arn = $1;