本文属于机器翻译版本。若本译文内容与英语原文存在差异，则一律以英文原文为准。

# B AWS atch 的操作、资源和条件键
<a name="list_awsbatch"></a>

AWS Batch（服务前缀:`batch`）提供以下特定于服务的资源、操作和条件上下文密钥，供在 IAM 权限策略中使用。

参考：
+ 了解如何[配置该服务](https://docs.aws.amazon.com/batch/latest/userguide/)。
+ 查看[适用于该服务的 API 操作列表](https://docs.aws.amazon.com/batch/latest/APIReference/)。
+ 了解如何[使用 IAM](https://docs.aws.amazon.com/batch/latest/userguide/IAM_policies.html) 权限策略保护该服务及其资源。

**Topics**
+ [由 B AWS atch 定义的操作](#awsbatch-actions-as-permissions)
+ [由 B AWS atch 定义的资源类型](#awsbatch-resources-for-iam-policies)
+ [B AWS atch 的条件密钥](#awsbatch-policy-keys)

## 由 B AWS atch 定义的操作
<a name="awsbatch-actions-as-permissions"></a>

您可以在 IAM 策略语句的 `Action` 元素中指定以下操作。可以使用策略授予在 AWS中执行操作的权限。您在策略中使用一项操作时，通常使用相同的名称允许或拒绝对 API 操作或 CLI 命令的访问。但在某些情况下，单一动作可控制对多项操作的访问。还有某些操作需要多种不同的动作。

操作表的**访问级别**列描述如何对操作进行分类（列出、读取、权限管理或标记）。此分类可以帮助您了解当您在策略中使用操作时，相应操作授予的访问级别。有关访问级别的更多信息，请参阅[策略摘要中的访问级别](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_understand-policy-summary-access-level-summaries.html)。

操作表的**资源类型**列指示每项操作是否支持资源级权限。如果该列没有任何值，您必须在策略语句的 `Resource` 元素中指定策略应用的所有资源（“\*”）。通过在 IAM policy 中使用条件来筛选访问权限，以控制是否可以在资源或请求中使用特定标签键。如果操作具有一个或多个必需资源，则调用方必须具有使用这些资源来使用该操作的权限。必需资源在表中以星号 (\*) 表示。如果您在 IAM policy 中使用 `Resource` 元素限制资源访问权限，则必须为每种必需的资源类型添加 ARN 或模式。某些操作支持多种资源类型。如果资源类型是可选的（未指示为必需），则可以选择使用一种可选资源类型。

操作表的**条件键**列包括可以在策略语句的 `Condition` 元素中指定的键。有关与服务资源关联的条件键的更多信息，请参阅资源类型表的**条件键**列。

操作表的**依赖操作**列显示成功调用操作可能需要的其他权限。除了操作本身的权限以外，可能还需要这些权限。若某个操作指定依赖操作，则这些依赖关系可能适用于为该操作定义的其他资源，而不仅仅是表中列出的第一个资源。

**注意**  
资源条件键在[资源类型](#awsbatch-resources-for-iam-policies)表中列出。您可以在操作表的**资源类型（\* 为必需）**列中找到应用于某项操作的资源类型的链接。资源类型表中的资源类型包括**条件密钥**列，这是应用于操作表中操作的资源条件键。

有关下表中各列的详细信息，请参阅[操作表](reference_policies_actions-resources-contextkeys.html#actions_table)。


****  


- **  [https://docs.aws.amazon.com/batch/latest/APIReference/API_CancelJob.html](https://docs.aws.amazon.com/batch/latest/APIReference/API_CancelJob.html) **
  - **描述:** 授予取消您账户中 B AWS atch 作业队列中任务的权限
  - **访问级别:** 写入
  - **资源类型（\* 为必需）:**  [#awsbatch-job](#awsbatch-job) 
  - **条件键:** 
  - **相关操作:** 

- **  [https://docs.aws.amazon.com/batch/latest/APIReference/API_CreateComputeEnvironment.html](https://docs.aws.amazon.com/batch/latest/APIReference/API_CreateComputeEnvironment.html) **
  - **描述:** 授予在您的账户中创建 AWS Batch 计算环境的权限
  - **访问级别:** 写入
  - **资源类型（\* 为必需）:**  [#awsbatch-compute-environment](#awsbatch-compute-environment)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  / **条件键:**  [#awsbatch-aws_RequestTag___TagKey_](#awsbatch-aws_RequestTag___TagKey_) <br /> [#awsbatch-aws_TagKeys](#awsbatch-aws_TagKeys)  / **相关操作:** 

- **  [https://docs.aws.amazon.com/batch/latest/APIReference/API_CreateConsumableResource.html](https://docs.aws.amazon.com/batch/latest/APIReference/API_CreateConsumableResource.html) **
  - **描述:** 授予在您的账户中创建 AWS Batch 可消耗资源的权限
  - **访问级别:** 写入
  - **资源类型（\* 为必需）:**  [#awsbatch-consumable-resource](#awsbatch-consumable-resource)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  / **条件键:**  [#awsbatch-aws_RequestTag___TagKey_](#awsbatch-aws_RequestTag___TagKey_) <br /> [#awsbatch-aws_TagKeys](#awsbatch-aws_TagKeys)  / **相关操作:** 

- **  [https://docs.aws.amazon.com/batch/latest/APIReference/API_CreateJobQueue.html](https://docs.aws.amazon.com/batch/latest/APIReference/API_CreateJobQueue.html) **
  - **描述:** 授予在您的账户中创建 AWS Batch 作业队列的权限
  - **访问级别:** 写入
  - **资源类型（\* 为必需）:**  [#awsbatch-job-queue](#awsbatch-job-queue)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  [#awsbatch-compute-environment](#awsbatch-compute-environment)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  [#awsbatch-scheduling-policy](#awsbatch-scheduling-policy)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  [#awsbatch-service-environment](#awsbatch-service-environment)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  / **条件键:**  [#awsbatch-aws_RequestTag___TagKey_](#awsbatch-aws_RequestTag___TagKey_) <br /> [#awsbatch-aws_TagKeys](#awsbatch-aws_TagKeys)  / **相关操作:** 

- **  [https://docs.aws.amazon.com/batch/latest/APIReference/API_CreateQuotaShare.html](https://docs.aws.amazon.com/batch/latest/APIReference/API_CreateQuotaShare.html) **
  - **描述:** 授予在您的账户中创建 AWS Batch 配额份额的权限
  - **访问级别:** 写入
  - **资源类型（\* 为必需）:**  [#awsbatch-job-queue](#awsbatch-job-queue)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  [#awsbatch-quota-share](#awsbatch-quota-share)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  / **条件键:**  [#awsbatch-aws_RequestTag___TagKey_](#awsbatch-aws_RequestTag___TagKey_) <br /> [#awsbatch-aws_TagKeys](#awsbatch-aws_TagKeys)  / **相关操作:** 

- **  [https://docs.aws.amazon.com/batch/latest/APIReference/API_CreateSchedulingPolicy.html](https://docs.aws.amazon.com/batch/latest/APIReference/API_CreateSchedulingPolicy.html) **
  - **描述:** 授予在您的账户中创建 AWS Batch 计划策略的权限
  - **访问级别:** 写入
  - **资源类型（\* 为必需）:**  [#awsbatch-scheduling-policy](#awsbatch-scheduling-policy)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  / **条件键:**  [#awsbatch-aws_RequestTag___TagKey_](#awsbatch-aws_RequestTag___TagKey_) <br /> [#awsbatch-aws_TagKeys](#awsbatch-aws_TagKeys)  / **相关操作:** 

- **  [https://docs.aws.amazon.com/batch/latest/APIReference/API_CreateServiceEnvironment.html](https://docs.aws.amazon.com/batch/latest/APIReference/API_CreateServiceEnvironment.html) **
  - **描述:** 授予在您的账户中创建 AWS Batch 服务环境的权限
  - **访问级别:** 写入
  - **资源类型（\* 为必需）:**  [#awsbatch-service-environment](#awsbatch-service-environment)  / **条件键:**  / **相关操作:**  iam:CreateServiceLinkedRole 
  - **资源类型（\* 为必需）:**  / **条件键:**  [#awsbatch-aws_RequestTag___TagKey_](#awsbatch-aws_RequestTag___TagKey_) <br /> [#awsbatch-aws_TagKeys](#awsbatch-aws_TagKeys)  / **相关操作:** 

- **  [https://docs.aws.amazon.com/batch/latest/APIReference/API_DeleteComputeEnvironment.html](https://docs.aws.amazon.com/batch/latest/APIReference/API_DeleteComputeEnvironment.html) **
  - **描述:** 授予删除您账户中的 AWS Batch 计算环境的权限
  - **访问级别:** 写入
  - **资源类型（\* 为必需）:**  [#awsbatch-compute-environment](#awsbatch-compute-environment) 
  - **条件键:** 
  - **相关操作:** 

- **  [https://docs.aws.amazon.com/batch/latest/APIReference/API_DeleteConsumableResource.html](https://docs.aws.amazon.com/batch/latest/APIReference/API_DeleteConsumableResource.html) **
  - **描述:** 授予删除您账户中 AWS Batch 可消耗资源的权限
  - **访问级别:** 写入
  - **资源类型（\* 为必需）:**  [#awsbatch-consumable-resource](#awsbatch-consumable-resource) 
  - **条件键:** 
  - **相关操作:** 

- **  [https://docs.aws.amazon.com/batch/latest/APIReference/API_DeleteJobQueue.html](https://docs.aws.amazon.com/batch/latest/APIReference/API_DeleteJobQueue.html) **
  - **描述:** 授予删除您账户中的 AWS Batch 作业队列的权限
  - **访问级别:** 写入
  - **资源类型（\* 为必需）:**  [#awsbatch-job-queue](#awsbatch-job-queue) 
  - **条件键:** 
  - **相关操作:** 

- **  [https://docs.aws.amazon.com/batch/latest/APIReference/API_DeleteQuotaShare.html](https://docs.aws.amazon.com/batch/latest/APIReference/API_DeleteQuotaShare.html) **
  - **描述:** 授予删除您账户中的 AWS Batch 配额份额的权限
  - **访问级别:** 写入
  - **资源类型（\* 为必需）:**  [#awsbatch-quota-share](#awsbatch-quota-share) 
  - **条件键:** 
  - **相关操作:** 

- **  [https://docs.aws.amazon.com/batch/latest/APIReference/API_DeleteSchedulingPolicy.html](https://docs.aws.amazon.com/batch/latest/APIReference/API_DeleteSchedulingPolicy.html) **
  - **描述:** 授予删除您账户中的 AWS Batch 计划策略的权限
  - **访问级别:** 写入
  - **资源类型（\* 为必需）:**  [#awsbatch-scheduling-policy](#awsbatch-scheduling-policy) 
  - **条件键:** 
  - **相关操作:** 

- **  [https://docs.aws.amazon.com/batch/latest/APIReference/API_DeleteServiceEnvironment.html](https://docs.aws.amazon.com/batch/latest/APIReference/API_DeleteServiceEnvironment.html) **
  - **描述:** 授予删除您账户中的 AWS Batch 服务环境的权限
  - **访问级别:** 写入
  - **资源类型（\* 为必需）:**  [#awsbatch-service-environment](#awsbatch-service-environment) 
  - **条件键:** 
  - **相关操作:** 

- **  [https://docs.aws.amazon.com/batch/latest/APIReference/API_DeregisterJobDefinition.html](https://docs.aws.amazon.com/batch/latest/APIReference/API_DeregisterJobDefinition.html) **
  - **描述:** 授予在您的账户中注销 AWS Batch 作业定义的权限
  - **访问级别:** 写入
  - **资源类型（\* 为必需）:**  [#awsbatch-job-definition-revision](#awsbatch-job-definition-revision) 
  - **条件键:** 
  - **相关操作:** 

- **  [https://docs.aws.amazon.com/batch/latest/APIReference/API_DescribeComputeEnvironments.html](https://docs.aws.amazon.com/batch/latest/APIReference/API_DescribeComputeEnvironments.html) **
  - **描述:** 授予描述您账户中一个或多个 AWS Batch 计算环境的权限
  - **访问级别:** 读取
  - **资源类型（\* 为必需）:** 
  - **条件键:** 
  - **相关操作:** 

- **  [https://docs.aws.amazon.com/batch/latest/APIReference/API_DescribeConsumableResource.html](https://docs.aws.amazon.com/batch/latest/APIReference/API_DescribeConsumableResource.html) **
  - **描述:** 授予描述您账户中一个或多个 AWS Batch 可消耗资源的权限
  - **访问级别:** 读取
  - **资源类型（\* 为必需）:**  [#awsbatch-consumable-resource](#awsbatch-consumable-resource) 
  - **条件键:** 
  - **相关操作:** 

- **  [https://docs.aws.amazon.com/batch/latest/APIReference/API_DescribeJobDefinitions.html](https://docs.aws.amazon.com/batch/latest/APIReference/API_DescribeJobDefinitions.html) **
  - **描述:** 授予描述账户中一个或多个 B AWS atch 作业定义的权限
  - **访问级别:** 读取
  - **资源类型（\* 为必需）:** 
  - **条件键:** 
  - **相关操作:** 

- **  [https://docs.aws.amazon.com/batch/latest/APIReference/API_DescribeJobQueues.html](https://docs.aws.amazon.com/batch/latest/APIReference/API_DescribeJobQueues.html) **
  - **描述:** 授予描述您账户中一个或多个 AWS Batch 作业队列的权限
  - **访问级别:** 读取
  - **资源类型（\* 为必需）:** 
  - **条件键:** 
  - **相关操作:** 

- **  [https://docs.aws.amazon.com/batch/latest/APIReference/API_DescribeJobs.html](https://docs.aws.amazon.com/batch/latest/APIReference/API_DescribeJobs.html) **
  - **描述:** 授予描述您账户中的 B AWS atch 任务列表的权限
  - **访问级别:** 读取
  - **资源类型（\* 为必需）:** 
  - **条件键:** 
  - **相关操作:** 

- **  [https://docs.aws.amazon.com/batch/latest/APIReference/API_DescribeQuotaShare.html](https://docs.aws.amazon.com/batch/latest/APIReference/API_DescribeQuotaShare.html) **
  - **描述:** 授予描述您账户中 AWS Batch 配额份额的权限
  - **访问级别:** 读取
  - **资源类型（\* 为必需）:**  [#awsbatch-quota-share](#awsbatch-quota-share) 
  - **条件键:** 
  - **相关操作:** 

- **  [https://docs.aws.amazon.com/batch/latest/APIReference/API_DescribeSchedulingPolicies.html](https://docs.aws.amazon.com/batch/latest/APIReference/API_DescribeSchedulingPolicies.html) **
  - **描述:** 授予描述您账户中一个或多个 AWS Batch 调度策略的权限
  - **访问级别:** 读取
  - **资源类型（\* 为必需）:** 
  - **条件键:** 
  - **相关操作:** 

- **  [https://docs.aws.amazon.com/batch/latest/APIReference/API_DescribeServiceEnvironments.html](https://docs.aws.amazon.com/batch/latest/APIReference/API_DescribeServiceEnvironments.html) **
  - **描述:** 授予描述您账户中一个或多个 AWS Batch 服务环境的权限
  - **访问级别:** 读取
  - **资源类型（\* 为必需）:** 
  - **条件键:** 
  - **相关操作:** 

- **  [https://docs.aws.amazon.com/batch/latest/APIReference/API_DescribeServiceJob.html](https://docs.aws.amazon.com/batch/latest/APIReference/API_DescribeServiceJob.html) **
  - **描述:** 授予描述您账户中的 AWS Batch 服务任务的权限
  - **访问级别:** 读取
  - **资源类型（\* 为必需）:** 
  - **条件键:** 
  - **相关操作:** 

- **  [https://docs.aws.amazon.com/batch/latest/APIReference/API_GetJobQueueSnapshot.html](https://docs.aws.amazon.com/batch/latest/APIReference/API_GetJobQueueSnapshot.html) **
  - **描述:** 授予在您的账户中获取 B AWS atch 作业队列快照的权限
  - **访问级别:** 读取
  - **资源类型（\* 为必需）:**  [#awsbatch-job-queue](#awsbatch-job-queue) 
  - **条件键:** 
  - **相关操作:** 

- **  [https://docs.aws.amazon.com/batch/latest/APIReference/API_ListConsumableResources.html](https://docs.aws.amazon.com/batch/latest/APIReference/API_ListConsumableResources.html) **
  - **描述:** 授予在您的账户中列 AWS 出 Batch 可消耗资源的权限
  - **访问级别:** 列表
  - **资源类型（\* 为必需）:** 
  - **条件键:** 
  - **相关操作:** 

- **  [https://docs.aws.amazon.com/batch/latest/APIReference/API_ListJobs.html](https://docs.aws.amazon.com/batch/latest/APIReference/API_ListJobs.html) **
  - **描述:** 授予列出您账户中指定 B AWS atch 作业队列任务的权限
  - **访问级别:** 列表
  - **资源类型（\* 为必需）:** 
  - **条件键:** 
  - **相关操作:** 

- **  [https://docs.aws.amazon.com/batch/latest/APIReference/API_ListJobsByConsumableResource.html](https://docs.aws.amazon.com/batch/latest/APIReference/API_ListJobsByConsumableResource.html) **
  - **描述:** 授予列出需要账户中特定消耗资源的 B AWS atch 任务的权限
  - **访问级别:** 列表
  - **资源类型（\* 为必需）:**  [#awsbatch-consumable-resource](#awsbatch-consumable-resource) 
  - **条件键:** 
  - **相关操作:** 

- **  [https://docs.aws.amazon.com/batch/latest/APIReference/API_ListQuotaShares.html](https://docs.aws.amazon.com/batch/latest/APIReference/API_ListQuotaShares.html) **
  - **描述:** 授予在您的账户中列出 AWS Batch 配额份额的权限
  - **访问级别:** 列表
  - **资源类型（\* 为必需）:**  [#awsbatch-job-queue](#awsbatch-job-queue) 
  - **条件键:** 
  - **相关操作:** 

- **  [https://docs.aws.amazon.com/batch/latest/APIReference/API_ListSchedulingPolicies.html](https://docs.aws.amazon.com/batch/latest/APIReference/API_ListSchedulingPolicies.html) **
  - **描述:** 授予在您的账户中列 AWS 出 Batch 计划策略的权限
  - **访问级别:** 读取
  - **资源类型（\* 为必需）:** 
  - **条件键:** 
  - **相关操作:** 

- **  [https://docs.aws.amazon.com/batch/latest/APIReference/API_ListServiceJobs.html](https://docs.aws.amazon.com/batch/latest/APIReference/API_ListServiceJobs.html) **
  - **描述:** 授予列出您账户中指定 B AWS atch 作业队列的服务任务的权限
  - **访问级别:** 列表
  - **资源类型（\* 为必需）:** 
  - **条件键:** 
  - **相关操作:** 

- **  [https://docs.aws.amazon.com/batch/latest/APIReference/API_ListTagsForResource.html](https://docs.aws.amazon.com/batch/latest/APIReference/API_ListTagsForResource.html) **
  - **描述:** 授予在您的账户中列出 AWS Batch 资源标签的权限
  - **访问级别:** 读取
  - **资源类型（\* 为必需）:**  [#awsbatch-compute-environment](#awsbatch-compute-environment)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  [#awsbatch-consumable-resource](#awsbatch-consumable-resource)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  [#awsbatch-job](#awsbatch-job)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  [#awsbatch-job-definition-revision](#awsbatch-job-definition-revision)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  [#awsbatch-job-queue](#awsbatch-job-queue)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  [#awsbatch-quota-share](#awsbatch-quota-share)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  [#awsbatch-scheduling-policy](#awsbatch-scheduling-policy)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  [#awsbatch-service-environment](#awsbatch-service-environment)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  [#awsbatch-service-job](#awsbatch-service-job)  / **条件键:**  / **相关操作:** 

- **  [https://docs.aws.amazon.com/batch/latest/APIReference/API_RegisterJobDefinition.html](https://docs.aws.amazon.com/batch/latest/APIReference/API_RegisterJobDefinition.html) **
  - **描述:** 授予在您的账户中注册 AWS Batch 作业定义的权限
  - **访问级别:** 写入
  - **资源类型（\* 为必需）:**  [#awsbatch-job-definition](#awsbatch-job-definition)  / **条件键:**  [#awsbatch-aws_ResourceTag___TagKey_](#awsbatch-aws_ResourceTag___TagKey_)  / **相关操作:** 
  - **资源类型（\* 为必需）:**  [#awsbatch-consumable-resource](#awsbatch-consumable-resource)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  / **条件键:**  [#awsbatch-batch_User](#awsbatch-batch_User) <br /> [#awsbatch-batch_Privileged](#awsbatch-batch_Privileged) <br /> [#awsbatch-batch_Image](#awsbatch-batch_Image) <br /> [#awsbatch-batch_LogDriver](#awsbatch-batch_LogDriver) <br /> [#awsbatch-batch_AWSLogsGroup](#awsbatch-batch_AWSLogsGroup) <br /> [#awsbatch-batch_AWSLogsRegion](#awsbatch-batch_AWSLogsRegion) <br /> [#awsbatch-batch_AWSLogsStreamPrefix](#awsbatch-batch_AWSLogsStreamPrefix) <br /> [#awsbatch-batch_AWSLogsCreateGroup](#awsbatch-batch_AWSLogsCreateGroup) <br /> [#awsbatch-batch_EKSServiceAccountName](#awsbatch-batch_EKSServiceAccountName) <br /> [#awsbatch-batch_EKSImage](#awsbatch-batch_EKSImage) <br /> [#awsbatch-batch_EKSRunAsUser](#awsbatch-batch_EKSRunAsUser) <br /> [#awsbatch-batch_EKSRunAsGroup](#awsbatch-batch_EKSRunAsGroup) <br /> [#awsbatch-batch_EKSPrivileged](#awsbatch-batch_EKSPrivileged) <br /> [#awsbatch-batch_EKSNamespace](#awsbatch-batch_EKSNamespace) <br /> [#awsbatch-aws_RequestTag___TagKey_](#awsbatch-aws_RequestTag___TagKey_) <br /> [#awsbatch-aws_TagKeys](#awsbatch-aws_TagKeys)  / **相关操作:** 

- **  [https://docs.aws.amazon.com/batch/latest/APIReference/API_SubmitJob.html](https://docs.aws.amazon.com/batch/latest/APIReference/API_SubmitJob.html) **
  - **描述:** 授予根据您账户中的任务定义提交 B AWS atch 作业的权限
  - **访问级别:** 写入
  - **资源类型（\* 为必需）:**  [#awsbatch-job](#awsbatch-job)  / **条件键:**  [#awsbatch-batch_ShareIdentifier](#awsbatch-batch_ShareIdentifier) <br /> [#awsbatch-batch_EKSImage](#awsbatch-batch_EKSImage) <br /> [#awsbatch-batch_EKSNamespace](#awsbatch-batch_EKSNamespace)  / **相关操作:** 
  - **资源类型（\* 为必需）:**  [#awsbatch-job-queue](#awsbatch-job-queue)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  [#awsbatch-consumable-resource](#awsbatch-consumable-resource)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  [#awsbatch-job-definition](#awsbatch-job-definition)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  [#awsbatch-job-definition-revision](#awsbatch-job-definition-revision)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  / **条件键:**  [#awsbatch-aws_RequestTag___TagKey_](#awsbatch-aws_RequestTag___TagKey_) <br /> [#awsbatch-aws_TagKeys](#awsbatch-aws_TagKeys)  / **相关操作:** 

- **  [https://docs.aws.amazon.com/batch/latest/APIReference/API_SubmitServiceJob.html](https://docs.aws.amazon.com/batch/latest/APIReference/API_SubmitServiceJob.html) **
  - **描述:** 授予提交 B AWS atch 服务作业的权限
  - **访问级别:** 写入
  - **资源类型（\* 为必需）:**  [#awsbatch-job-queue](#awsbatch-job-queue)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  [#awsbatch-service-job](#awsbatch-service-job)  / **条件键:**  [#awsbatch-batch_ShareIdentifier](#awsbatch-batch_ShareIdentifier)  / **相关操作:** 
  - **资源类型（\* 为必需）:**  [#awsbatch-quota-share](#awsbatch-quota-share)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  / **条件键:**  [#awsbatch-aws_RequestTag___TagKey_](#awsbatch-aws_RequestTag___TagKey_) <br /> [#awsbatch-aws_TagKeys](#awsbatch-aws_TagKeys) <br /> [#awsbatch-batch_SchedulingPriority](#awsbatch-batch_SchedulingPriority)  / **相关操作:** 

- **  [https://docs.aws.amazon.com/batch/latest/APIReference/API_TagResource.html](https://docs.aws.amazon.com/batch/latest/APIReference/API_TagResource.html) **
  - **描述:** 授予在您的账户中为 AWS Batch 资源添加标签的权限
  - **访问级别:** 标签
  - **资源类型（\* 为必需）:**  [#awsbatch-compute-environment](#awsbatch-compute-environment)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  [#awsbatch-consumable-resource](#awsbatch-consumable-resource)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  [#awsbatch-job](#awsbatch-job)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  [#awsbatch-job-definition-revision](#awsbatch-job-definition-revision)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  [#awsbatch-job-queue](#awsbatch-job-queue)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  [#awsbatch-quota-share](#awsbatch-quota-share)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  [#awsbatch-scheduling-policy](#awsbatch-scheduling-policy)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  [#awsbatch-service-environment](#awsbatch-service-environment)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  [#awsbatch-service-job](#awsbatch-service-job)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  / **条件键:**  [#awsbatch-aws_RequestTag___TagKey_](#awsbatch-aws_RequestTag___TagKey_) <br /> [#awsbatch-aws_TagKeys](#awsbatch-aws_TagKeys)  / **相关操作:** 

- **  [https://docs.aws.amazon.com/batch/latest/APIReference/API_TerminateJob.html](https://docs.aws.amazon.com/batch/latest/APIReference/API_TerminateJob.html) **
  - **描述:** 授予终止您账户中 B AWS atch 作业队列中任务的权限
  - **访问级别:** 写入
  - **资源类型（\* 为必需）:**  [#awsbatch-job](#awsbatch-job) 
  - **条件键:** 
  - **相关操作:** 

- **  [https://docs.aws.amazon.com/batch/latest/APIReference/API_TerminateServiceJob.html](https://docs.aws.amazon.com/batch/latest/APIReference/API_TerminateServiceJob.html) **
  - **描述:** 授予终止您账户中 B AWS atch 作业队列中的服务作业的权限
  - **访问级别:** 写入
  - **资源类型（\* 为必需）:**  [#awsbatch-service-job](#awsbatch-service-job) 
  - **条件键:** 
  - **相关操作:** 

- **  [https://docs.aws.amazon.com/batch/latest/APIReference/API_UntagResource.html](https://docs.aws.amazon.com/batch/latest/APIReference/API_UntagResource.html) **
  - **描述:** 授予在您的账户中取消标记 AWS Batch 资源的权限
  - **访问级别:** 标签
  - **资源类型（\* 为必需）:**  [#awsbatch-compute-environment](#awsbatch-compute-environment)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  [#awsbatch-consumable-resource](#awsbatch-consumable-resource)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  [#awsbatch-job](#awsbatch-job)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  [#awsbatch-job-definition-revision](#awsbatch-job-definition-revision)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  [#awsbatch-job-queue](#awsbatch-job-queue)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  [#awsbatch-quota-share](#awsbatch-quota-share)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  [#awsbatch-scheduling-policy](#awsbatch-scheduling-policy)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  [#awsbatch-service-environment](#awsbatch-service-environment)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  [#awsbatch-service-job](#awsbatch-service-job)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  / **条件键:**  [#awsbatch-aws_TagKeys](#awsbatch-aws_TagKeys)  / **相关操作:** 

- **  [https://docs.aws.amazon.com/batch/latest/APIReference/API_UpdateComputeEnvironment.html](https://docs.aws.amazon.com/batch/latest/APIReference/API_UpdateComputeEnvironment.html) **
  - **描述:** 授予更新您账户中的 AWS Batch 计算环境的权限
  - **访问级别:** 写入
  - **资源类型（\* 为必需）:**  [#awsbatch-compute-environment](#awsbatch-compute-environment) 
  - **条件键:** 
  - **相关操作:** 

- **  [https://docs.aws.amazon.com/batch/latest/APIReference/API_UpdateConsumableResource.html](https://docs.aws.amazon.com/batch/latest/APIReference/API_UpdateConsumableResource.html) **
  - **描述:** 授予更新您账户中 AWS Batch 可消耗资源的权限
  - **访问级别:** 写入
  - **资源类型（\* 为必需）:**  [#awsbatch-consumable-resource](#awsbatch-consumable-resource) 
  - **条件键:** 
  - **相关操作:** 

- **  [https://docs.aws.amazon.com/batch/latest/APIReference/API_UpdateJobQueue.html](https://docs.aws.amazon.com/batch/latest/APIReference/API_UpdateJobQueue.html) **
  - **描述:** 授予更新您账户中的 AWS Batch 作业队列的权限
  - **访问级别:** 写入
  - **资源类型（\* 为必需）:**  [#awsbatch-job-queue](#awsbatch-job-queue)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  [#awsbatch-compute-environment](#awsbatch-compute-environment)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  [#awsbatch-scheduling-policy](#awsbatch-scheduling-policy)  / **条件键:**  / **相关操作:** 

- **  [https://docs.aws.amazon.com/batch/latest/APIReference/API_UpdateQuotaShare.html](https://docs.aws.amazon.com/batch/latest/APIReference/API_UpdateQuotaShare.html) **
  - **描述:** 授予更新您账户中 AWS Batch 配额份额的权限
  - **访问级别:** 写入
  - **资源类型（\* 为必需）:**  [#awsbatch-quota-share](#awsbatch-quota-share) 
  - **条件键:** 
  - **相关操作:** 

- **  [https://docs.aws.amazon.com/batch/latest/APIReference/API_UpdateSchedulingPolicy.html](https://docs.aws.amazon.com/batch/latest/APIReference/API_UpdateSchedulingPolicy.html) **
  - **描述:** 授予更新您账户中的 AWS Batch 计划策略的权限
  - **访问级别:** 写入
  - **资源类型（\* 为必需）:**  [#awsbatch-scheduling-policy](#awsbatch-scheduling-policy) 
  - **条件键:** 
  - **相关操作:** 

- **  [https://docs.aws.amazon.com/batch/latest/APIReference/API_UpdateServiceEnvironment.html](https://docs.aws.amazon.com/batch/latest/APIReference/API_UpdateServiceEnvironment.html) **
  - **描述:** 授予更新您账户中的 AWS Batch 服务环境的权限
  - **访问级别:** 写入
  - **资源类型（\* 为必需）:**  [#awsbatch-service-environment](#awsbatch-service-environment) 
  - **条件键:** 
  - **相关操作:** 

- **  [https://docs.aws.amazon.com/batch/latest/APIReference/API_UpdateServiceJob.html](https://docs.aws.amazon.com/batch/latest/APIReference/API_UpdateServiceJob.html) **
  - **描述:** 授予更新您账户中 Bat AWS ch 作业队列中的服务作业的权限
  - **访问级别:** 写入
  - **资源类型（\* 为必需）:**  [#awsbatch-service-job](#awsbatch-service-job)  / **条件键:**  / **相关操作:** 
  - **资源类型（\* 为必需）:**  / **条件键:**  [#awsbatch-batch_SchedulingPriority](#awsbatch-batch_SchedulingPriority)  / **相关操作:** 



## 由 B AWS atch 定义的资源类型
<a name="awsbatch-resources-for-iam-policies"></a>

以下资源类型是由该服务定义的，可以在 IAM 权限策略语句的 `Resource` 元素中使用这些资源类型。[操作表](#awsbatch-actions-as-permissions)中的每个操作指定了可以使用该操作指定的资源类型。您也可以在策略中包含条件键，从而定义资源类型。这些键显示在资源类型表的最后一列。有关下表中各列的详细信息，请参阅[资源类型表](reference_policies_actions-resources-contextkeys.html#resources_table)。


****  

| 资源类型 | ARN | 条件键 | 
| --- | --- | --- | 
|   [https://docs.aws.amazon.com/batch/latest/userguide/compute_environments.html](https://docs.aws.amazon.com/batch/latest/userguide/compute_environments.html)  |  arn:${Partition}:batch:${Region}:${Account}:compute-environment/${ComputeEnvironmentName}  |  [#awsbatch-aws_ResourceTag___TagKey_](#awsbatch-aws_ResourceTag___TagKey_)  | 
|   [https://docs.aws.amazon.com/batch/latest/userguide/job_queues.html](https://docs.aws.amazon.com/batch/latest/userguide/job_queues.html)  |  arn:${Partition}:batch:${Region}:${Account}:job-queue/${JobQueueName}  |  [#awsbatch-aws_ResourceTag___TagKey_](#awsbatch-aws_ResourceTag___TagKey_)  | 
|   [https://docs.aws.amazon.com/batch/latest/userguide/job_definitions.html](https://docs.aws.amazon.com/batch/latest/userguide/job_definitions.html)  |  arn:${Partition}:batch:${Region}:${Account}:job-definition/${JobDefinitionName}  |  | 
|   [https://docs.aws.amazon.com/batch/latest/userguide/job_definitions.html](https://docs.aws.amazon.com/batch/latest/userguide/job_definitions.html)  |  arn:${Partition}:batch:${Region}:${Account}:job-definition/${JobDefinitionName}:${Revision}  |  [#awsbatch-aws_ResourceTag___TagKey_](#awsbatch-aws_ResourceTag___TagKey_)  | 
|   [https://docs.aws.amazon.com/batch/latest/userguide/jobs.html](https://docs.aws.amazon.com/batch/latest/userguide/jobs.html)  |  arn:${Partition}:batch:${Region}:${Account}:job/${JobId}  |  [#awsbatch-aws_ResourceTag___TagKey_](#awsbatch-aws_ResourceTag___TagKey_)  | 
|   [https://docs.aws.amazon.com/batch/latest/userguide/scheduling-policies.html](https://docs.aws.amazon.com/batch/latest/userguide/scheduling-policies.html)  |  arn:${Partition}:batch:${Region}:${Account}:scheduling-policy/${SchedulingPolicyName}  |  [#awsbatch-aws_ResourceTag___TagKey_](#awsbatch-aws_ResourceTag___TagKey_)  | 
|   [https://docs.aws.amazon.com/batch/latest/userguide/service-environments.html](https://docs.aws.amazon.com/batch/latest/userguide/service-environments.html)  |  arn:${Partition}:batch:${Region}:${Account}:service-environment/${ServiceEnvironmentName}  |  [#awsbatch-aws_ResourceTag___TagKey_](#awsbatch-aws_ResourceTag___TagKey_)  | 
|   [https://docs.aws.amazon.com/batch/latest/userguide/service-jobs.html](https://docs.aws.amazon.com/batch/latest/userguide/service-jobs.html)  |  arn:${Partition}:batch:${Region}:${Account}:service-job/${JobId}  |  [#awsbatch-aws_ResourceTag___TagKey_](#awsbatch-aws_ResourceTag___TagKey_)  | 
|   [https://docs.aws.amazon.com/batch/latest/userguide/resource-aware-scheduling.html](https://docs.aws.amazon.com/batch/latest/userguide/resource-aware-scheduling.html)  |  arn:${Partition}:batch:${Region}:${Account}:consumable-resource/${ConsumableResourceName}  |  [#awsbatch-aws_ResourceTag___TagKey_](#awsbatch-aws_ResourceTag___TagKey_)  | 
|   [https://docs.aws.amazon.com/batch/latest/userguide/quota-shares.html](https://docs.aws.amazon.com/batch/latest/userguide/quota-shares.html)  |  arn:${Partition}:batch:${Region}:${Account}:job-queue/${JobQueueName}/quota-share/${QuotaShareName}  |  [#awsbatch-aws_ResourceTag___TagKey_](#awsbatch-aws_ResourceTag___TagKey_)  | 

## B AWS atch 的条件密钥
<a name="awsbatch-policy-keys"></a>

AWS Batch 定义了以下可在 IAM 策略`Condition`元素中使用的条件键。您可以使用这些键进一步细化应用策略语句的条件。有关下表中各列的详细信息，请参阅[条件键表](reference_policies_actions-resources-contextkeys.html#context_keys_table)。

要查看适用于所有服务的全局条件键，请参阅 [AWS 全局条件上下文键](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html)。


****  

| 条件键 | 描述 | 类型 | 
| --- | --- | --- | 
|   [https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-requesttag](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-requesttag)  | 按请求中传递的标签筛选访问权限 | 字符串 | 
|   [https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-resourcetag](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-resourcetag)  | 按与资源关联的标签筛选访问权限 | 字符串 | 
|   [https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-tagkeys](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-tagkeys)  | 按请求中传递的标签键筛选访问权限 | ArrayOfString | 
|   [https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsbatch.html#awsbatch-policy-keys](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsbatch.html#awsbatch-policy-keys)  | 根据指定的日志记录驱动程序，筛选访问权限，以确定是否将为日志创建 awslog 组 | 布尔型 | 
|   [https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsbatch.html#awsbatch-policy-keys](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsbatch.html#awsbatch-policy-keys)  | 根据日志所在的 awslog 组筛选访问权限 | 字符串 | 
|   [https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsbatch.html#awsbatch-policy-keys](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsbatch.html#awsbatch-policy-keys)  | 根据日志发送到的区域筛选访问权限 | 字符串 | 
|   [https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsbatch.html#awsbatch-policy-keys](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsbatch.html#awsbatch-policy-keys)  | 根据 awslog 日志流前缀筛选访问权限 | 字符串 | 
|   [https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsbatch.html#awsbatch-policy-keys](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsbatch.html#awsbatch-policy-keys)  | 按用于启动 Amazon EKS 任务容器的映像筛选访问权限 | 字符串 | 
|   [https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsbatch.html#awsbatch-policy-keys](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsbatch.html#awsbatch-policy-keys)  | 按用于运行 Amazon EKS 任务容器组（pod）的集群的命名空间筛选访问权限 | 字符串 | 
|   [https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsbatch.html#awsbatch-policy-keys](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsbatch.html#awsbatch-policy-keys)  | 按指定的特权参数值筛选访问权限，该参数值可确定是否为此容器提供了对 Amazon EKS 任务主机容器实例的提升权限（类似于根用户） | 布尔型 | 
|   [https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsbatch.html#awsbatch-policy-keys](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsbatch.html#awsbatch-policy-keys)  | 按用于启动 Amazon EKS 任务中容器的指定组数字 ID（gid）筛选访问权限 | 数值 | 
|   [https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsbatch.html#awsbatch-policy-keys](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsbatch.html#awsbatch-policy-keys)  | 按用于启动 Amazon EKS 任务中容器的指定用户数字 ID（uid）筛选访问权限 | 数值 | 
|   [https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsbatch.html#awsbatch-policy-keys](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsbatch.html#awsbatch-policy-keys)  | 按用于运行 Amazon EKS 任务容器组（pod）的服务账户名称筛选访问权限 | 字符串 | 
|   [https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsbatch.html#awsbatch-policy-keys](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsbatch.html#awsbatch-policy-keys)  | 按用于启动容器的映像筛选访问权限 | 字符串 | 
|   [https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsbatch.html#awsbatch-policy-keys](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsbatch.html#awsbatch-policy-keys)  | 根据用于容器的日志驱动程序筛选访问权限 | 字符串 | 
|   [https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsbatch.html#awsbatch-policy-keys](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsbatch.html#awsbatch-policy-keys)  | 根据指定的特权参数值筛选访问权限，该参数值可确定是否为此容器提供了对主机容器实例的提升权限（类似于根用户） | 布尔型 | 
|   [https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsbatch.html#awsbatch-policy-keys](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsbatch.html#awsbatch-policy-keys)  | 按任务队列中作业的调度优先级筛选访问权限 | 数值 | 
|   [https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsbatch.html#awsbatch-policy-keys](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsbatch.html#awsbatch-policy-keys)  | 根据提交任务内使用的 shareIdentifier 筛选访问权限 | 字符串 | 
|   [https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsbatch.html#awsbatch-policy-keys](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsbatch.html#awsbatch-policy-keys)  | 根据容器内使用的用户名或数字 UID 筛选访问权限 | 字符串 |