Resource: Restrict to job definition prefix on job submission - Amazon Batch
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Resource: Restrict to job definition prefix on job submission

Use the following policy to submit jobs to any job queue with any job definition name that starts with JobDefA.

Important

When scoping resource-level access for job submission, you must provide both job queue and job definition resource types.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "batch:SubmitJob"
      ],
      "Resource": [
        "arn:aws-cn:batch:<aws_region>:<aws_account_id>:job-definition/JobDefA_*",
        "arn:aws-cn:batch:<aws_region>:<aws_account_id>:job-queue/*"
      ]
    }
  ]
}