Query: elasticache_cluster_node_encryption_at_rest_disabled_count

select
  count(*) as value,
  'Encryption at Rest Disabled' as label,
  case
    when count(*) > 0 then 'alert'
    else 'ok'
  end as "type"
from
  aws_elasticache_cluster
where
  not at_rest_encryption_enabled;