Query: storage_bucket_by_encryption_type

with bucket_encryption_status as (
  select
    case
      when default_kms_key_name is null then 'google-managed'
      else 'customer-managed'
    end as encryption_status
  from
    gcp_storage_bucket
)
select
  encryption_status,
  count(*)
from
  bucket_encryption_status
group by
  encryption_status;