Posture check: AWS KMS Customer Managed Key (CMK) is disabled
Query: ```config from cloud.resource where cloud.type = 'aws' AND api.name = 'aws-kms-get-key-rotation-status' AND json.rule = keyMetadata.enabled is false```