Still having issues with Disabling Security hub Controls in LZA (1.7.0) about landing-zone-accelerator-on-aws HOT 2 OPEN

You need to specify the controls to disable as they appear in the standard.

For NIST Special Publication 800-53 Revision 5,
Config.1 should be CM-3 CM-6 CM-8

For CIS Foundations Benchmark v1.4.0,
Config.1 is "3.5" (and the quotation marks are required)

You can find those IDs next to the standard in the according user guides:
e.g. https://docs.aws.amazon.com/securityhub/latest/userguide/config-controls.html

from landing-zone-accelerator-on-aws.

@akobara seems overly complex i am better off using the policy and not using LZA at this point because if im reading you right

to remove cloudtrail.5 i would have to add all these in

• AC-2(4)
• AC-4(26)
• AC-6(9)
• AU-10
• AU-12
• AU-2
• AU-3
• AU-6(1)
• AU-6(3)
• AU-6(4)
• AU-6(5)
• AU-7(1)
• CA-7
• SC-7(9)
• SI-20
• SI-3(8)
• SI-4(20)
• SI-4(5)
• SI-7(8)

from landing-zone-accelerator-on-aws.