batch:SubmitServiceJob

Write

batch:SubmitServiceJob is a Write access-level action in the batch service. Grants permission to submit an AWS Batch service job

Resource types

ARNs that batch:SubmitServiceJob can be scoped to in an IAM policy.

arn:${Partition}:batch:${Region}:${Account}:job-queue/${JobQueueName} required

job-queue

arn:${Partition}:batch:${Region}:${Account}:job-queue/${JobQueueName}/quota-share/${QuotaShareName}

quota-share

arn:${Partition}:batch:${Region}:${Account}:service-job/${JobId} required

service-job

Condition keys

Keys you can use in the Condition block of a policy that grants batch:SubmitServiceJob.

aws:RequestTag/${TagKey} String

Filters access by the tags that are passed in the request

aws:TagKeys ArrayOfString

Filters access by the tag keys that are passed in the request

batch:SchedulingPriority Numeric

Filters access by the scheduling priority for jobs in the job queue

aws:ResourceTag/${TagKey} String

Filters access by the tags associated with the resource

batch:ShareIdentifier String

Filters access by the shareIdentifier used inside submit job

Example IAM policy

A minimal policy that allows batch:SubmitServiceJob. Replace "Resource": "*" with a specific ARN to follow least privilege.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowBatchSubmitServiceJob",
      "Effect": "Allow",
      "Action": "batch:SubmitServiceJob",
      "Resource": "*"
    }
  ]
}

Related actions in batch

batch:CancelJob Write batch:CreateComputeEnvironment Write batch:CreateConsumableResource Write batch:CreateJobQueue Write batch:CreateQuotaShare Write batch:CreateSchedulingPolicy Write batch:CreateServiceEnvironment Write batch:DeleteComputeEnvironment Write batch:DeleteConsumableResource Write batch:DeleteJobQueue Write batch:DeleteQuotaShare Write batch:DeleteSchedulingPolicy Write

View all batch actions →