In the Amazon Web Services (AWS) Cloud, AWS Security Hub standard controls, such as CIS AWS Foundations Benchmark or AWS Foundational Security Best Practices, can only be turned off (disabled) manually from within a single AWS account. In a multi-account environment, you can’t turn off the controls across multiple Security Hub member accounts with “one click” (that is, one API call). This pattern demonstrates how to use one click to turn off the Security Hub standard controls across all the Security Hub member accounts managed by your Security Hub administrator account.
