you can use --where to exclude specific controls when running in check mode. Here is an example: ``` steampipe check aws_compliance.benchmark.cis_v150_1 --where "resource_name not in ('cis_v150_1_1', 'cis_v150_1_3')" ```