Posture check: AWS DynamoDB encrypted using AWS owned CMK instead of AWS managed CMK
Query: ```config from cloud.resource where cloud.type = 'aws' AND api.name = 'aws-dynamodb-describe-table' AND json.rule =  'ssedescription does not exist or (ssedescription exists and ssedescription.ssetype == AES256)'```