Query: cloudtrail_trail_logging_disabled_count

select
  count(*) as value,
  'Logging Disabled' as label,
  case
    count(*)
    when 0 then 'ok'
    else 'alert'
  end as "type"
from
  aws_cloudtrail_trail
where
  region = home_region
  and not is_logging;