diff --git a/changelogs/fragments/44278-pamd_valid_simple_controls.yaml b/changelogs/fragments/44278-pamd_valid_simple_controls.yaml
new file mode 100644
index 0000000000..a778c227f3
--- /dev/null
+++ b/changelogs/fragments/44278-pamd_valid_simple_controls.yaml
@@ -0,0 +1,2 @@
+bugfixes:
+- pamd - Allow for validation of definitive control in pamd module.
diff --git a/lib/ansible/modules/system/pamd.py b/lib/ansible/modules/system/pamd.py
index ab0319b679..e2e04e0863 100644
--- a/lib/ansible/modules/system/pamd.py
+++ b/lib/ansible/modules/system/pamd.py
@@ -335,7 +335,7 @@ class PamdInclude(PamdLine):
 class PamdRule(PamdLine):
 
     valid_types = ['account', 'auth', 'password', 'session']
-    valid_simple_controls = ['required', 'requisite', 'sufficient', 'optional', 'include', 'substack']
+    valid_simple_controls = ['required', 'requisite', 'sufficient', 'optional', 'include', 'substack', 'definitive']
     valid_control_values = ['success', 'open_err', 'symbol_err', 'service_err', 'system_err', 'buf_err',
                             'perm_denied', 'auth_err', 'cred_insufficient', 'authinfo_unavail', 'user_unknown',
                             'maxtries', 'new_authtok_reqd', 'acct_expired', 'session_err', 'cred_unavail',