batch:SubmitJob is a Write access-level action in the batch service. Grants permission to submit an AWS Batch job from a job definition in your account
ARNs that batch:SubmitJob can be scoped to in an IAM policy.
Keys you can use in the Condition block of a policy that grants batch:SubmitJob.
Filters access by the tags that are passed in the request
Filters access by the tag keys that are passed in the request
Filters access by the tags associated with the resource
Filters access by the image used to start a container for an Amazon EKS job
Filters access by the namespace of a cluster used to run the pod for an Amazon EKS job
Filters access by the shareIdentifier used inside submit job
A minimal policy that allows batch:SubmitJob. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowBatchSubmitJob",
"Effect": "Allow",
"Action": "batch:SubmitJob",
"Resource": "*"
}
]
}