Query: key_vault_public_network_access_enabled_count

select
  count(*) as value,
  'Public Access Enabled' as label,
  case
    when count(*) > 0 then 'alert'
    else 'ok'
  end as "type"
from
  azure_key_vault
where
  network_acls is null
  or network_acls ->> 'defaultAction' != 'Deny';