# CfnSecurityControlProps

Properties for defining a `CfnSecurityControl`.

Extends: CfnSecurityControlProps
Used as props by: CfnSecurityControl

- Source: Generated code
- Type last changed: v2.143.0 · 24 May 2024

## Example

```ts
// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_securityhub as securityhub } from 'aws-cdk-lib';
const cfnSecurityControlProps: securityhub.CfnSecurityControlProps = {
  parameters: {
    parametersKey: {
      valueType: 'valueType',

      // the properties below are optional
      value: {
        boolean: false,
        double: 123,
        enum: 'enum',
        enumList: ['enumList'],
        integer: 123,
        integerList: [123],
        string: 'string',
        stringList: ['stringList'],
      },
    },
  },

  // the properties below are optional
  lastUpdateReason: 'lastUpdateReason',
  securityControlArn: 'securityControlArn',
  securityControlId: 'securityControlId',
};
```

## Properties

- `lastUpdateReason`: string — The most recent reason for updating the customizable properties of a security control.

  This differs from the `UpdateReason` field of the [`BatchUpdateStandardsControlAssociations`](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_BatchUpdateStandardsControlAssociations.html) API, which tracks the reason for updating the enablement status of a control. This field accepts alphanumeric characters in addition to white spaces, dashes, and underscores.

- `parameters`: [IResolvable](/cdk/api/v2/docs/aws-cdk-lib.IResolvable.html) | { [key: string]: [IResolvable](/cdk/api/v2/docs/aws-cdk-lib.IResolvable.html) | [CfnSecurityControl.ParameterConfigurationProperty](/cdk/api/v2/docs/aws-cdk-lib.aws_securityhub.CfnSecurityControl.ParameterConfigurationProperty.html) } (required) — An object that identifies the name of a control parameter, its current value, and whether it has been customized.

- `securityControlArn`: string — The Amazon Resource Name (ARN) for a security control across standards, such as `arn:aws:securityhub:eu-central-1:123456789012:security-control/S3.1` . This parameter doesn't mention a specific standard.

- `securityControlId`: string — The unique identifier of a security control across standards.

  Values for this field typically consist of an AWS service name and a number, such as APIGateway.3.