Query: cognitive_account_encrypted_with_cmk

with all_cognitive_account as (
  select
    *
  from
    terraform_resource
  where
    type = 'azurerm_cognitive_account'
),
cognitive_account_cmk as (
  select
    *
  from
    terraform_resource
  where
    type = 'azurerm_cognitive_account_customer_managed_key'
)
select
  c.address as resource,
  case
    when (b.attributes_std ->> 'cognitive_account_id') is not null then 'ok'
    else 'alarm'
  end as status,
  split_part(c.address, '.', 2) || case
    when (b.attributes_std ->> 'cognitive_account_id') is not null then ' encrypted with CMK'
    else ' not encrypted with CMK'
  end || '.' reason,
  c.path || ':' || c.start_line
from
  all_cognitive_account as c
  left join cognitive_account_cmk as b on c.name = (
    split_part(
      (b.attributes_std ->> 'cognitive_account_id'),
      '.',
      2
    )
  )