Query: compute_virtual_machine_by_host_encryption_status

select
  encryption,
  count(*)
from
  (
    select
      security_profile -> 'encryptionAtHost',
      case
        when security_profile -> 'encryptionAtHost' <> 'true'
        or security_profile -> 'encryptionAtHost' is null then 'unencrypted'
        else 'encrypted'
      end encryption
    from
      azure_compute_virtual_machine
  ) as vm
group by
  encryption
order by
  encryption;