enabledControlIdentifier

The ARN of the enabled control to be disabled, which uniquely identifies the control instance on the target organizational unit.