batch:SubmitJob

Write

batch:SubmitJob is a Write access-level action in the batch service. Grants permission to submit an AWS Batch job from a job definition in your account

Resource types

ARNs that batch:SubmitJob can be scoped to in an IAM policy.

arn:${Partition}:batch:${Region}:${Account}:consumable-resource/${ConsumableResourceName}
consumable-resource
arn:${Partition}:batch:${Region}:${Account}:job/${JobId} required
job
arn:${Partition}:batch:${Region}:${Account}:job-definition/${JobDefinitionName}
job-definition
arn:${Partition}:batch:${Region}:${Account}:job-definition/${JobDefinitionName}:${Revision}
job-definition-revision
arn:${Partition}:batch:${Region}:${Account}:job-queue/${JobQueueName} required
job-queue

Condition keys

Keys you can use in the Condition block of a policy that grants batch:SubmitJob.

aws:RequestTag/${TagKey} String

Filters access by the tags that are passed in the request

aws:TagKeys ArrayOfString

Filters access by the tag keys that are passed in the request

aws:ResourceTag/${TagKey} String

Filters access by the tags associated with the resource

batch:EKSImage String

Filters access by the image used to start a container for an Amazon EKS job

batch:EKSNamespace String

Filters access by the namespace of a cluster used to run the pod for an Amazon EKS job

batch:ShareIdentifier String

Filters access by the shareIdentifier used inside submit job

Example IAM policy

A minimal policy that allows batch:SubmitJob. Replace "Resource": "*" with a specific ARN to follow least privilege.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowBatchSubmitJob",
      "Effect": "Allow",
      "Action": "batch:SubmitJob",
      "Resource": "*"
    }
  ]
}

Related actions in batch

View all batch actions →