Query: dynamodb_table_encryption_table

select
  t.name as "Name",
  case
    when t.sse_description ->> 'SSEType' = 'KMS'
    and k.key_manager = 'AWS' then 'AWS Managed'
    when t.sse_description ->> 'SSEType' = 'KMS'
    and k.key_manager = 'CUSTOMER' then 'Customer Managed'
    else 'Default'
  end as "Type",
  t.sse_description ->> 'KMSMasterKeyArn' as "Key ARN",
  a.title as "Account",
  t.account_id as "Account ID",
  t.region as "Region",
  t.arn as "ARN"
from
  aws_dynamodb_table as t
  left join aws_kms_key as k on t.sse_description ->> 'KMSMasterKeyArn' = k.arn
  join aws_account as a on t.account_id = a.account_id
order by
  t.name;