Query: key_vault_key_by_key_expiration_status

select
  status,
  count(*)
from
  (
    select
      expires_at,
      case
        when expires_at is not null then 'enabled'
        else 'disabled'
      end status
    from
      azure_key_vault_key
  ) as kv
group by
  status
order by
  status;