Query: cloudtrail_trail_unencrypted

select
  'Encryption' as label,
  case
    when kms_key_id is not null then 'Enabled'
    else 'Disabled'
  end as value,
  case
    when kms_key_id is not null then 'ok'
    else 'alert'
  end as type
from
  aws_cloudtrail_trail
where
  region = home_region
  and arn = $1;