翻訳は機械翻訳により提供されています。提供された翻訳内容と英語版の間で齟齬、不一致または矛盾がある場合、英語版が優先します。
# BatchServiceRolePolicy
**説明**: Amazon EC2 や Amazon ECS リソースなど、必要なリソースを管理するための AWS Batch サービスへのアクセスを提供します。
`BatchServiceRolePolicy` は [AWS マネージドポリシー](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_managed-vs-inline.html#aws-managed-policies)です。
## このポリシーを使用すると
このポリシーは、ユーザーに代わってサービスがアクションを実行することを許可する、サービスリンクロールにアタッチされます。ユーザー、グループおよびロールにこのポリシーはアタッチできません。
## ポリシーの詳細
+ **タイプ**: サービスリンクロールポリシー
+ **作成日時**: 2021 年 3 月 10 日 06:55 UTC
+ **編集日時:** 2023 年 12 月 05 日 22:52 UTC
+ **ARN**: `arn:aws:iam::aws:policy/aws-service-role/BatchServiceRolePolicy`
## ポリシーのバージョン
**ポリシーのバージョン:** v7 (デフォルト)
ポリシーのデフォルトバージョンは、ポリシーのアクセス許可を定義するバージョンです。ポリシーを持つユーザーまたはロールが AWS リソースへのアクセスをリクエストすると、 はポリシーのデフォルトバージョン AWS をチェックして、リクエストを許可するかどうかを判断します。
## JSON ポリシードキュメント
```
{
"Version" : "2012-10-17",
"Statement" : [
{
"Sid" : "AWSBatchPolicyStatement1",
"Effect" : "Allow",
"Action" : [
"ec2:DescribeAccountAttributes",
"ec2:DescribeInstances",
"ec2:DescribeInstanceStatus",
"ec2:DescribeInstanceAttribute",
"ec2:DescribeSubnets",
"ec2:DescribeSecurityGroups",
"ec2:DescribeKeyPairs",
"ec2:DescribeImages",
"ec2:DescribeImageAttribute",
"ec2:DescribeSpotInstanceRequests",
"ec2:DescribeSpotFleetInstances",
"ec2:DescribeSpotFleetRequests",
"ec2:DescribeSpotPriceHistory",
"ec2:DescribeSpotFleetRequestHistory",
"ec2:DescribeVpcClassicLink",
"ec2:DescribeLaunchTemplateVersions",
"ec2:RequestSpotFleet",
"autoscaling:DescribeAccountLimits",
"autoscaling:DescribeAutoScalingGroups",
"autoscaling:DescribeLaunchConfigurations",
"autoscaling:DescribeAutoScalingInstances",
"autoscaling:DescribeScalingActivities",
"eks:DescribeCluster",
"ecs:DescribeClusters",
"ecs:DescribeContainerInstances",
"ecs:DescribeTaskDefinition",
"ecs:DescribeTasks",
"ecs:ListClusters",
"ecs:ListContainerInstances",
"ecs:ListTaskDefinitionFamilies",
"ecs:ListTaskDefinitions",
"ecs:ListTasks",
"ecs:DeregisterTaskDefinition",
"ecs:TagResource",
"ecs:ListAccountSettings",
"logs:DescribeLogGroups",
"iam:GetInstanceProfile",
"iam:GetRole"
],
"Resource" : "*"
},
{
"Sid" : "AWSBatchPolicyStatement2",
"Effect" : "Allow",
"Action" : [
"logs:CreateLogGroup",
"logs:CreateLogStream"
],
"Resource" : "arn:aws:logs:*:*:log-group:/aws/batch/job*"
},
{
"Sid" : "AWSBatchPolicyStatement3",
"Effect" : "Allow",
"Action" : [
"logs:PutLogEvents"
],
"Resource" : "arn:aws:logs:*:*:log-group:/aws/batch/job*:log-stream:*"
},
{
"Sid" : "AWSBatchPolicyStatement4",
"Effect" : "Allow",
"Action" : [
"autoscaling:CreateOrUpdateTags"
],
"Resource" : "*",
"Condition" : {
"Null" : {
"aws:RequestTag/AWSBatchServiceTag" : "false"
}
}
},
{
"Sid" : "AWSBatchPolicyStatement5",
"Effect" : "Allow",
"Action" : "iam:PassRole",
"Resource" : [
"*"
],
"Condition" : {
"StringEquals" : {
"iam:PassedToService" : [
"ec2.amazonaws.com",
"ec2.amazonaws.com.rproxy.goskope.com.cn",
"ecs-tasks.amazonaws.com"
]
}
}
},
{
"Sid" : "AWSBatchPolicyStatement6",
"Effect" : "Allow",
"Action" : "iam:CreateServiceLinkedRole",
"Resource" : "*",
"Condition" : {
"StringEquals" : {
"iam:AWSServiceName" : [
"spot.amazonaws.com",
"spotfleet.amazonaws.com",
"autoscaling.amazonaws.com",
"ecs.amazonaws.com"
]
}
}
},
{
"Sid" : "AWSBatchPolicyStatement7",
"Effect" : "Allow",
"Action" : [
"ec2:CreateLaunchTemplate"
],
"Resource" : "*",
"Condition" : {
"Null" : {
"aws:RequestTag/AWSBatchServiceTag" : "false"
}
}
},
{
"Sid" : "AWSBatchPolicyStatement8",
"Effect" : "Allow",
"Action" : [
"ec2:TerminateInstances",
"ec2:CancelSpotFleetRequests",
"ec2:ModifySpotFleetRequest",
"ec2:DeleteLaunchTemplate"
],
"Resource" : "*",
"Condition" : {
"Null" : {
"aws:ResourceTag/AWSBatchServiceTag" : "false"
}
}
},
{
"Sid" : "AWSBatchPolicyStatement9",
"Effect" : "Allow",
"Action" : [
"autoscaling:CreateLaunchConfiguration",
"autoscaling:DeleteLaunchConfiguration"
],
"Resource" : "arn:aws:autoscaling:*:*:launchConfiguration:*:launchConfigurationName/AWSBatch*"
},
{
"Sid" : "AWSBatchPolicyStatement10",
"Effect" : "Allow",
"Action" : [
"autoscaling:CreateAutoScalingGroup",
"autoscaling:UpdateAutoScalingGroup",
"autoscaling:SetDesiredCapacity",
"autoscaling:DeleteAutoScalingGroup",
"autoscaling:SuspendProcesses",
"autoscaling:PutNotificationConfiguration",
"autoscaling:TerminateInstanceInAutoScalingGroup"
],
"Resource" : "arn:aws:autoscaling:*:*:autoScalingGroup:*:autoScalingGroupName/AWSBatch*"
},
{
"Sid" : "AWSBatchPolicyStatement11",
"Effect" : "Allow",
"Action" : [
"ecs:DeleteCluster",
"ecs:DeregisterContainerInstance",
"ecs:RunTask",
"ecs:StartTask",
"ecs:StopTask"
],
"Resource" : "arn:aws:ecs:*:*:cluster/AWSBatch*"
},
{
"Sid" : "AWSBatchPolicyStatement12",
"Effect" : "Allow",
"Action" : [
"ecs:RunTask",
"ecs:StartTask",
"ecs:StopTask"
],
"Resource" : "arn:aws:ecs:*:*:task-definition/*"
},
{
"Sid" : "AWSBatchPolicyStatement13",
"Effect" : "Allow",
"Action" : [
"ecs:StopTask"
],
"Resource" : "arn:aws:ecs:*:*:task/*/*"
},
{
"Sid" : "AWSBatchPolicyStatement14",
"Effect" : "Allow",
"Action" : [
"ecs:CreateCluster",
"ecs:RegisterTaskDefinition"
],
"Resource" : "*",
"Condition" : {
"Null" : {
"aws:RequestTag/AWSBatchServiceTag" : "false"
}
}
},
{
"Sid" : "AWSBatchPolicyStatement15",
"Effect" : "Allow",
"Action" : "ec2:RunInstances",
"Resource" : [
"arn:aws:ec2:*::image/*",
"arn:aws:ec2:*::snapshot/*",
"arn:aws:ec2:*:*:subnet/*",
"arn:aws:ec2:*:*:network-interface/*",
"arn:aws:ec2:*:*:security-group/*",
"arn:aws:ec2:*:*:volume/*",
"arn:aws:ec2:*:*:key-pair/*",
"arn:aws:ec2:*:*:launch-template/*",
"arn:aws:ec2:*:*:placement-group/*",
"arn:aws:ec2:*:*:capacity-reservation/*",
"arn:aws:ec2:*:*:elastic-gpu/*",
"arn:aws:elastic-inference:*:*:elastic-inference-accelerator/*",
"arn:aws:resource-groups:*:*:group/*"
]
},
{
"Sid" : "AWSBatchPolicyStatement16",
"Effect" : "Allow",
"Action" : "ec2:RunInstances",
"Resource" : "arn:aws:ec2:*:*:instance/*",
"Condition" : {
"Null" : {
"aws:RequestTag/AWSBatchServiceTag" : "false"
}
}
},
{
"Sid" : "AWSBatchPolicyStatement17",
"Effect" : "Allow",
"Action" : [
"ec2:CreateTags"
],
"Resource" : [
"*"
],
"Condition" : {
"StringEquals" : {
"ec2:CreateAction" : [
"RunInstances",
"CreateLaunchTemplate",
"RequestSpotFleet"
]
}
}
}
]
}
```
## 詳細情報
+ [IAM ポリシーのバージョニングについて理解する](https://docs.aws.amazon.com//IAM/latest/UserGuide/access_policies_managed-versioning.html)
+ [AWS 管理ポリシーの使用を開始し、最小特権のアクセス許可に移行する](https://docs.aws.amazon.com//IAM/latest/UserGuide/best-practices.html#bp-use-aws-defined-policies)