# SecurityControlsConfigurationProperty

An object that defines which security controls are enabled in an AWS Security Hub CSPM configuration policy.

The enablement status of a control is aligned across all of the enabled standards in an account.

This property is required only if `ServiceEnabled` is set to `true` in your configuration policy.

- Source: Generated code
- Type last changed: v2.145.0 · 7 Jun 2024

## Example

```ts
// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_securityhub as securityhub } from 'aws-cdk-lib';
const securityControlsConfigurationProperty: securityhub.CfnConfigurationPolicy.SecurityControlsConfigurationProperty = {
  disabledSecurityControlIdentifiers: ['disabledSecurityControlIdentifiers'],
  enabledSecurityControlIdentifiers: ['enabledSecurityControlIdentifiers'],
  securityControlCustomParameters: [{
    parameters: {
      parametersKey: {
        valueType: 'valueType',

        // the properties below are optional
        value: {
          boolean: false,
          double: 123,
          enum: 'enum',
          enumList: ['enumList'],
          integer: 123,
          integerList: [123],
          string: 'string',
          stringList: ['stringList'],
        },
      },
    },
    securityControlId: 'securityControlId',
  }],
};
```

## Properties

- `disabledSecurityControlIdentifiers`: string[] — A list of security controls that are disabled in the configuration policy.

  Provide only one of `EnabledSecurityControlIdentifiers` or `DisabledSecurityControlIdentifiers` .

  If you provide `DisabledSecurityControlIdentifiers` , Security Hub CSPM enables all other controls not in the list, and enables [AutoEnableControls](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_UpdateSecurityHubConfiguration.html#securityhub-UpdateSecurityHubConfiguration-request-AutoEnableControls) .

- `enabledSecurityControlIdentifiers`: string[] — A list of security controls that are enabled in the configuration policy.

  Provide only one of `EnabledSecurityControlIdentifiers` or `DisabledSecurityControlIdentifiers` .

  If you provide `EnabledSecurityControlIdentifiers` , Security Hub CSPM disables all other controls not in the list, and disables [AutoEnableControls](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_UpdateSecurityHubConfiguration.html#securityhub-UpdateSecurityHubConfiguration-request-AutoEnableControls) .

- `securityControlCustomParameters`: [IResolvable](/cdk/api/v2/docs/aws-cdk-lib.IResolvable.html) | [IResolvable](/cdk/api/v2/docs/aws-cdk-lib.IResolvable.html) | [CfnConfigurationPolicy.SecurityControlCustomParameterProperty](/cdk/api/v2/docs/aws-cdk-lib.aws_securityhub.CfnConfigurationPolicy.SecurityControlCustomParameterProperty.html)[] — A list of security controls and control parameter values that are included in a configuration policy.