AWS Batch on Amazon EKS adds Linux capabilities, seccomp, and pod-level settings

AWS Batch Security Context Settings for Amazon EKS

AWS Batch now supports additional Kubernetes security context settings in Amazon EKS job definitions, including Linux capabilities, seccomp profiles, and pod-level settings. For EKS clusters that enforce the Kubernetes Pod Security Standards restricted profile, you can now run AWS Batch jobs with only the privileges and system calls they require.

What to do

• Use the RegisterJobDefinition API to set capabilities and seccompProfile in a container's securityContext, or set securityContext in podProperties to define pod-wide settings such as fsGroup. Container-level settings override pod-level defaults.
• Configure these settings through the AWS Management Console, AWS CLI, AWS SDKs, or AWS CloudFormation.

The additional security context settings for AWS Batch on Amazon EKS are now supported in all AWS Regions where AWS Batch is available. For more information, see the Amazon EKS properties section in the AWS Batch User Guide.

If you need further guidance on AWS, our experts are available at AWS@westloop.io. You may also reach us by submitting the Contact Us form.