batch:RegisterJobDefinition

Write

batch:RegisterJobDefinition is a Write access-level action in the batch service. Grants permission to register an AWS Batch job definition in your account

Resource types

ARNs that batch:RegisterJobDefinition can be scoped to in an IAM policy.

arn:${Partition}:batch:${Region}:${Account}:consumable-resource/${ConsumableResourceName}
consumable-resource
arn:${Partition}:batch:${Region}:${Account}:job-definition/${JobDefinitionName} required
job-definition

Condition keys

Keys you can use in the Condition block of a policy that grants batch:RegisterJobDefinition.

aws:RequestTag/${TagKey} String

Filters access by the tags that are passed in the request

aws:TagKeys ArrayOfString

Filters access by the tag keys that are passed in the request

batch:AWSLogsCreateGroup Bool

Filters access by the specified logging driver to determine whether awslogs group will be created for the logs

batch:AWSLogsGroup String

Filters access by the awslogs group where the logs are located

batch:AWSLogsRegion String

Filters access by the region where the logs are sent to

batch:AWSLogsStreamPrefix String

Filters access by the awslogs log stream prefix

batch:EKSImage String

Filters access by the image used to start a container for an Amazon EKS job

batch:EKSNamespace String

Filters access by the namespace of a cluster used to run the pod for an Amazon EKS job

batch:EKSPrivileged Bool

Filters access by the specified privileged parameter value that determines whether the container is given elevated privileges on the host container instance (similar to the root user) for an Amazon EKS job

batch:EKSRunAsGroup Numeric

Filters access by the specified group numeric ID (gid) used to start a container in an Amazon EKS job

batch:EKSRunAsUser Numeric

Filters access by the specified user numeric ID (uid) used to start a a container in an Amazon EKS job

batch:EKSServiceAccountName String

Filters access by the name of the service account used to run the pod for an Amazon EKS job

batch:Image String

Filters access by the image used to start a container

batch:LogDriver String

Filters access by the log driver used for the container

batch:Privileged Bool

Filters access by the specified privileged parameter value that determines whether the container is given elevated privileges on the host container instance (similar to the root user)

batch:User String

Filters access by user name or numeric uid used inside the container

aws:ResourceTag/${TagKey} String

Filters access by the tags associated with the resource

Example IAM policy

A minimal policy that allows batch:RegisterJobDefinition. Replace "Resource": "*" with a specific ARN to follow least privilege.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowBatchRegisterJobDefinition",
      "Effect": "Allow",
      "Action": "batch:RegisterJobDefinition",
      "Resource": "*"
    }
  ]
}

Related actions in batch

View all batch actions →