Which type of RQL query should be run to determine if AWS Elastic Compute Cloud (EC2) instances without encryption was enabled?

NETWORK queries analyze VPC flow log data and network reachability between resources, not the configuration properties of individual instances.

CONFIG queries in Prisma Cloud use the 'config from cloud.resource' source to retrieve and evaluate the configuration attributes of cloud resources as returned by cloud provider APIs. Encryption settings on EC2 volumes or instances are stored as configuration properties - such as 'encrypted: false' on EBS volumes - and are accessible through AWS API calls like 'aws-ec2-describe-volumes'. CONFIG RQL is specifically designed to surface these resource-level attribute checks, making it the correct query type for encryption compliance verification.

EVENT queries analyze CloudTrail and audit log activity - actions taken by users or services - not static resource configuration attributes like encryption settings.

SECURITY is not a valid Prisma Cloud RQL query type; the three supported types are config, network, and event.