batch:SubmitJob

Write

batch:SubmitJob is a Write access-level action in the batch service. Grants permission to submit an AWS Batch job from a job definition in your account

Resource types

ARNs that batch:SubmitJob can be scoped to in an IAM policy.

arn:${Partition}:batch:${Region}:${Account}:job/${JobId}

job

arn:${Partition}:batch:${Region}:${Account}:job-queue/${JobQueueName}

job-queue

arn:${Partition}:batch:${Region}:${Account}:consumable-resource/${ConsumableResourceName}

consumable-resource

arn:${Partition}:batch:${Region}:${Account}:job-definition/${JobDefinitionName}

job-definition

arn:${Partition}:batch:${Region}:${Account}:job-definition/${JobDefinitionName}:${Revision}

job-definition-revision

Condition keys

Keys you can use in the Condition block of a policy that grants batch:SubmitJob.

aws:ResourceTag/${TagKey} String

Filters access by the tags associated with the resource

Example IAM policy

A minimal policy that allows batch:SubmitJob. Replace "Resource": "*" with a specific ARN to follow least privilege.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowBatchSubmitJob",
      "Effect": "Allow",
      "Action": "batch:SubmitJob",
      "Resource": "*"
    }
  ]
}

Related actions in batch

batch:CancelJob Write batch:CreateComputeEnvironment Write batch:CreateConsumableResource Write batch:CreateJobQueue Write batch:CreateQuotaShare Write batch:CreateSchedulingPolicy Write batch:CreateServiceEnvironment Write batch:DeleteComputeEnvironment Write batch:DeleteConsumableResource Write batch:DeleteJobQueue Write batch:DeleteQuotaShare Write batch:DeleteSchedulingPolicy Write

View all batch actions →