Query: cloudwatch_log_group_encryption_details

select
  case
    when kms_key_id is not null then 'Enabled'
    else 'Disabled'
  end as "Encryption",
  kms_key_id as "KMS Key ID"
from
  aws_cloudwatch_log_group
where
  arn = $1;