Some Security Hub CSPM controls accept parameters that affect how the control is evaluated and what produces a PASSED finding.