PAS-C01 Technology Practice Question
A company is using AWS Systems Manager to manage their SAP environment. They want to ensure that only specific users can run automation documents on production SAP instances. Which IAM policy action should be used to control access to executing automation documents?
⚠ Common exam trap
A common mix-up: candidates confuse the Run Command capability (ssm:SendCommand) with Automation execution, because both involve running commands on instances, but they use different IAM actions and APIs.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
ssm:StartAutomationExecution
The correct action is ssm:StartAutomationExecution because AWS Systems Manager Automation requires this specific permission to initiate an automation workflow. The question asks about controlling access to executing automation documents, and StartAutomationExecution is the IAM action that governs the ability to start an automation execution on a target resource, such as a production SAP instance.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
ssm:SendCommand
Why it's wrong here
SendCommand is for Run Command, not automation.
- ✗
ssm:GetParameter
Why it's wrong here
This is for reading parameters.
- ✓
ssm:StartAutomationExecution
Why this is correct
This action permits starting automation documents.
- ✗
ssm:ListDocuments
Why it's wrong here
This is for listing documents.
Go deeper
Related to this question
About these practice questions
This PAS-C01 question is part of Courseiva's 1,616-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PAS-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PAS-C01 exam.