Change log of AWS IAM permissions

2021-07-28

19 updated actions, 11 updated conditions

Updates

Actions

CancelJob
- Old: Cancels a job in an AWS Batch job queue.
  New: Grants permission to cancel a job in an AWS Batch job queue in your account
CreateComputeEnvironment
- Old: Creates an AWS Batch compute environment.
  New: Grants permission to create an AWS Batch compute environment in your account
- ＋ compute-environment
CreateJobQueue
- Old: Creates an AWS Batch job queue.
  New: Grants permission to create an AWS Batch job queue in your account
- ＋ job-queue
DeleteComputeEnvironment
- Old: Deletes an AWS Batch compute environment.
  New: Grants permission to delete an AWS Batch compute environment in your account
DeleteJobQueue
- Old: Deletes the specified job queue.
  New: Grants permission to delete an AWS Batch job queue in your account
DeregisterJobDefinition
- Old: Deregisters an AWS Batch job definition.
  New: Grants permission to deregister an AWS Batch job definition in your account
DescribeComputeEnvironments
- Old: Describes one or more of your compute environments.
  New: Grants permission to describe one or more AWS Batch compute environments in your account
DescribeJobDefinitions
- Old: Describes a list of job definitions.
  New: Grants permission to describe one or more AWS Batch job definitions in your account
DescribeJobQueues
- Old: Describes one or more of your job queues.
  New: Grants permission to describe one or more AWS Batch job queues in your account
DescribeJobs
- Old: Describes a list of AWS Batch jobs.
  New: Grants permission to describe a list of AWS Batch jobs in your account
ListJobs
- Old: Returns a list of task jobs for a specified job queue.
  New: Grants permission to list jobs for a specified AWS Batch job queue in your account
ListTagsForResource
- Old: List tags for the specified resource.
  New: Grants permission to list tags for an AWS Batch resource in your account
- List ⟶ Read
RegisterJobDefinition
- Old: Registers an AWS Batch job definition.
  New: Grants permission to register an AWS Batch job definition in your account
- ＋ job-definition
SubmitJob
- Old: Submits an AWS Batch job from a job definition.
  New: Grants permission to submit an AWS Batch job from a job definition in your account
TagResource
- Old: Tags the specified resource.
  New: Grants permission to tag an AWS Batch resource in your account
TerminateJob
- Old: Terminates a job in an AWS Batch job queue.
  New: Grants permission to terminate a job in an AWS Batch job queue in your account
UntagResource
- Old: Untags the specified resource.
  New: Grants permission to untag an AWS Batch resource in your account
UpdateComputeEnvironment
- Old: Updates an AWS Batch compute environment.
  New: Grants permission to update an AWS Batch compute environment in your account
UpdateJobQueue
- Old: Updates a job queue.
  New: Grants permission to update an AWS Batch job queue in your account
- ＋ compute-environment

Conditions

aws:RequestTag/${TagKey}
- Old: Filters actions based on the tags that are passed in the request.
  New: Filters access based on the tags that are passed in the request
aws:ResourceTag/${TagKey}
- Old: Filters actions based on the tags associated with the resource.
  New: Filters access based on the tags associated with the resource
aws:TagKeys
- Old: Filters actions based on the tag keys that are passed in the request.
  New: Filters access based on the tag keys that are passed in the request
batch:AWSLogsCreateGroup
- Old: When this parameter is true, the awslogs-group will be created for the logs.
  New: Filters access based on the specified logging driver to determine whether awslogs group will be created for the logs
batch:AWSLogsGroup
- Old: The awslogs group where the logs are located.
  New: Filters access based on the awslogs group where the logs are located
batch:AWSLogsRegion
- Old: The region where the logs are sent to.
  New: Filters access based on the region where the logs are sent to
batch:AWSLogsStreamPrefix
- Old: The awslogs log stream prefix.
  New: Filters access based on the awslogs log stream prefix
batch:Image
- Old: The image used to start a container.
  New: Filters access based on the image used to start a container
batch:LogDriver
- Old: The log driver used for the container.
  New: Filters access based on the log driver used for the container
batch:Privileged
- Old: When this parameter is true, the container is given elevated privileges on the host container instance (similar to the root user).
  New: Filter access based on the specified privileged parameter value that determines whether the container is given elevated privileges on the host container instance (similar to the root user)
batch:User
- Old: The user name or numeric uid to use inside the container.
  New: Filters access based on the user name or numeric uid used inside the container

AWS Batch (batch)

Updates