Check on an AWS cluster that following command is able to check if all disks are encrypted

oc get machineset --all-namespaces -o json | jq '[.items[] | .spec.template.spec.providerSpec.value.blockDevices[0].ebs.encrypted]'

Check that the rule is correct and runs fine