Posture check: GCP Storage Bucket encryption not configured with Customer-Managed Encryption Key (CMEK)
Query: ```config from cloud.resource where cloud.type = 'gcp' AND api.name = 'gcloud-storage-buckets-list' AND json.rule = encryption.defaultKmsKeyName does not exist```