AWS::SecurityHub::Standard StandardsControl - Amazon CloudFormation
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

AWS::SecurityHub::Standard StandardsControl

Provides details about an individual security control. For a list of Security Hub controls, see Security Hub controls reference in the Amazon Security Hub User Guide.


To declare this entity in your Amazon CloudFormation template, use the following syntax:


{ "Reason" : String, "StandardsControlArn" : String }


Reason: String StandardsControlArn: String



A user-defined reason for changing a control's enablement status in a specified standard. If you are disabling a control, then this property is required.

Required: No

Type: String

Pattern: .*\S.*

Update requires: No interruption


The Amazon Resource Name (ARN) of the control.

Required: Yes

Type: String

Pattern: arn:aws\S*:securityhub:\S*

Update requires: No interruption