A section about optional controls called proactive controls. Proactive controls check your resources before they deploy to determine whether new resources comply with the controls that are currently activated in your environment.