query "aws_iam_users_by_mfa_enabled" { sql = <<-EOQ with mfa as ( select case when mfa_enabled then 'Enabled' else 'Disabled' end as mfa_status from aws_iam_user ) select mfa_status, count(mfa_status) as "Total" from mfa group by mfa_status EOQ } query "aws_region_input" { sql = <