---
type: resource-type
title: SecurityControl
description: aws resource type AWS::SecurityHub::SecurityControl
name: SecurityControl
lexicon: aws
resource_type: AWS::SecurityHub::SecurityControl
---
`AWS::SecurityHub::SecurityControl`, a resource type of the aws lexicon.

## Properties

- `Parameters` (`Record<string, unknown>`, required): An object that identifies the name of a control parameter, its current value, and whether it has been customized.
- `LastUpdateReason` (`string`, optional): The most recent reason for updating the customizable properties of a security control. This differs from the UpdateReason field of the BatchUpdateStandardsControlAssociations API, which tracks the reason for updating the enablement status of a control. This field accepts alphanumeric characters in addition to white spaces, dashes, and underscores.
- `SecurityControlArn` (`string`, optional): The Amazon Resource Name (ARN) for a security control across standards, such as `arn:aws:securityhub:eu-central-1:123456789012:security-control/S3.1`. This parameter doesn't mention a specific standard.
- `SecurityControlId` (`string`, optional): The unique identifier of a security control across standards. Values for this field typically consist of an AWS service name and a number, such as APIGateway.3.