Query: ibm_kms_root_key_rotation_enabled

select
  'Root Key Rotation' as label,
  case
    when extractable then 'N/A'
    when not extractable
    and rotation_policy = '{}' then 'Disabled'
    else 'Enabled'
  end as value,
  case
    when not extractable
    and rotation_policy = '{}' then 'alert'
    else 'ok'
  end as type
from
  ibm_kms_key
where
  crn = $1;