Trigger: Detect & correct Compute disks not encrypted with CMK

select
  concat(id, ' [', subscription_id, '/', resource_group, ']') as title,
  name,
  resource_group,
  subscription_id,
  _ctx ->> 'connection_name' as conn
from
  azure_compute_disk
where
  disk_state = 'Attached'
  and encryption_type <> 'EncryptionAtRestWithCustomerKey';