How do I create a role for AWS Batch using the CLI

Question

How do I create a role for AWS Batch jobs on EC2 using the CLI? The role needs to have read-write permissions to an S3 bucket, e.g. s3://mybucket234. The role will be needed for the "aws batch create-compute-environment" command.

Answer

Hi.

You create an ECS-trusted IAM role as follows:

https://docs.aws.amazon.com/batch/latest/userguide/instance_IAM_role.html

When using the CLI, use the create-role command.

https://docs.aws.amazon.com/cli/latest/reference/iam/create-role.html

Trust the service using AssumeRole at creation time. Please refer to the following for the method.

https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_create_policy-examples.html

How do I create a role for AWS Batch using the CLI

Relevant questions

How do I create a role for AWS Batch using the CLI

What IAM Permissions are needed to do a CreateJob for S3 Batch?

Which role do I have to use for the Fargate tasks on AWS Batch?

Can I get API Keys for a Service Role?

S3 permissions STS assume role bucket to bucket copy

Verify permissions for the IAM role

How do I troubleshoot Amazon S3 Batch Operations issues?

How to allow a role to attach role to an instance?

SSM Automation - Download file from S3 - Assume Role

Create an IAM role to read from Secrets Manager