Query: cloudfront_distribution_logging_disabled

select
  'Logging Disabled' as label,
  count(*) as value,
  case
    count(*)
    when 0 then 'ok'
    else 'alert'
  end as type
from
  aws_cloudfront_distribution
where
  not (logging -> 'Enabled') :: boolean;