| batch:CreateComputeEnvironment | Admin |
| batch:CreateJobQueue | Admin |
| batch:CreateResource | Admin |
| batch:DeleteComputeEnvironment | Admin |
| batch:DeleteJobQueue | Admin |
| batch:DeleteResource | Admin |
| batch:DeregisterJobDefinition | Admin |
| batch:RegisterJobDefinition | Admin |
| batch:SubmitJob | Admin |
| batch:TerminateJob | Admin |
| batch:CancelJob | Operator |
| batch:TagResource | Operator |
| batch:UntagResource | Operator |
| batch:UpdateComputeEnvironment | Operator |
| batch:UpdateJobQueue | Operator |
| batch:UpdateResource | Operator |
| batch:DescribeComputeEnvironments | Metadata |
| batch:DescribeJobDefinitions | Metadata |
| batch:DescribeJobQueues | Metadata |
| batch:DescribeJobs | Metadata |
| batch:DescribeResources | Metadata |
| batch:ListJobs | Metadata |
| batch:ListTagsForResource | Metadata |
| ec2:DescribeKeyPairs | Metadata |
| ec2:DescribeLaunchTemplates | Metadata |
| ec2:DescribeSecurityGroups | Metadata |
| ec2:DescribeSubnets | Metadata |
| ec2:DescribeVpcs | Metadata |
| ecs:DescribeClusters | Metadata |
| ecs:DescribeContainerInstances | Metadata |
| ecs:DescribeServices | Metadata |
| ecs:DescribeTaskDefinition | Metadata |
| ecs:DescribeTasks | Metadata |
| ecs:ListClusters | Metadata |
| ecs:ListContainerInstances | Metadata |
| ecs:ListServices | Metadata |
| ecs:ListTaskDefinitionFamilies | Metadata |
| ecs:ListTaskDefinitions | Metadata |
| ecs:ListTasks | Metadata |
| iam:ListInstanceProfiles | Metadata |
| iam:ListRoles | Metadata |
