Query: kms_key_rotation_status

select
  rotation_status,
  count(*)
from
  (
    select
      case
        when key_rotation_enabled then 'enabled'
        else 'disabled'
      end rotation_status
    from
      aws_kms_key
    where
      key_manager = 'CUSTOMER'
  ) as t
group by
  rotation_status
order by
  rotation_status desc;