AWS Batch (IAM)

AWSbatchcompute

AWS Batch enables you to run batch computing workloads on the AWS cloud, dynamically provisioning the optimal quantity and type of compute resources.

iamaws

docs ↗

Permissions

Actions in this service

batch:ListJobs

batch:DescribeJobs

batch:DescribeJobQueues

batch:DescribeComputeEnvironments

batch:ListTagsForResource

Policy

Minimal privilege example

Copy-paste least-privilege policy statement — not yet harness-verified.

{ "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": [ "batch:ListJobs", "batch:DescribeJobs", "batch:DescribeJobQueues", "batch:DescribeComputeEnvironments", "batch:ListTagsForResource" ], "Resource": "*" } ] }

SDK mapping

Method → permission

SDK method mapping (e.g. boto3.get_object() → s3:GetObject) is not yet collected.

Footguns

Known gotchas

Avoid batch:* — grants full control including delete and modify of job queues, compute environments, and jobs

Avoid batch:CreateComputeEnvironment and batch:CreateJobQueue unless you need to provision infrastructure

Resources

docshttps://servicereference.us-east-1.amazonaws.com/v1/batch/batch.json ↗