batch:RegisterJobDefinition is a Write access-level action in the batch service. Grants permission to register an AWS Batch job definition in your account
ARNs that batch:RegisterJobDefinition can be scoped to in an IAM policy.
Keys you can use in the Condition block of a policy that grants batch:RegisterJobDefinition.
Filters access by the tags that are passed in the request
Filters access by the tag keys that are passed in the request
Filters access by the specified logging driver to determine whether awslogs group will be created for the logs
Filters access by the awslogs group where the logs are located
Filters access by the region where the logs are sent to
Filters access by the awslogs log stream prefix
Filters access by the image used to start a container for an Amazon EKS job
Filters access by the namespace of a cluster used to run the pod for an Amazon EKS job
Filters access by the specified privileged parameter value that determines whether the container is given elevated privileges on the host container instance (similar to the root user) for an Amazon EKS job
Filters access by the specified group numeric ID (gid) used to start a container in an Amazon EKS job
Filters access by the specified user numeric ID (uid) used to start a a container in an Amazon EKS job
Filters access by the name of the service account used to run the pod for an Amazon EKS job
Filters access by the image used to start a container
Filters access by the log driver used for the container
Filters access by the specified privileged parameter value that determines whether the container is given elevated privileges on the host container instance (similar to the root user)
Filters access by user name or numeric uid used inside the container
Filters access by the tags associated with the resource
A minimal policy that allows batch:RegisterJobDefinition. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowBatchRegisterJobDefinition",
"Effect": "Allow",
"Action": "batch:RegisterJobDefinition",
"Resource": "*"
}
]
}