Query: compute_virtual_machine_scale_set_by_host_encryption_status

select
  encryption,
  count(*)
from
  (
    select
      virtual_machine_security_profile -> 'encryptionAtHost',
      case
        when virtual_machine_security_profile -> 'encryptionAtHost' <> 'true'
        or virtual_machine_security_profile -> 'encryptionAtHost' is null then 'unencrypted'
        else 'encrypted'
      end encryption
    from
      azure_compute_virtual_machine_scale_set
  ) as vmss
group by
  encryption
order by
  encryption;