Query: lambda_function_by_encryption_status

select
  encryption_status,
  count(*)
from
  (
    select
      case
        when kms_key_arn is not null then 'enabled'
        else 'disabled'
      end encryption_status
    from
      aws_lambda_function
  ) as t
group by
  encryption_status
order by
  encryption_status desc;