@turbot/aws-batch

The aws-batch mod contains resource, control and policy definitions for AWS Batch service.

Recommended Version

Version

5.6.0

Released On

Nov 03, 2023

Depends On

@turbot/aws ^5.0.0
@turbot/turbot ^5.22.0
@turbot/turbot-iam ^5.1.0
@turbot/aws-iam ^5.1.0

Resource Types

Control Types

Policy Types

Release Notes

5.6.0 (2023-11-03)

What's new?

We've updated the runtime of the lambda functions to Node 18. You wouldn't notice any difference and things will continue to work smoothly and consistently as before.
Resource's metadata will now also include createdBy details in Turbot CMDB.

5.5.0 (2023-04-07)

What's new?

We've improved our event handling configuration and now filter which AWS events Guardrails listens for based on resources' CMDB policies. If a resource's CMDB policy is not set to Enforce: Enabled, the EventBridge rules will be configured to not send any events for that resource. This will greatly reduce the number of unnecessary events that Guardrails listens for and handles today.

Policy Types

AWS > Batch > Compute Environment > Approved > Custom
AWS > Batch > Job Definition > Approved > Custom
AWS > Batch > Job Queue > Approved > Custom
AWS > Turbot > Event Handlers > Events > Rules > Custom Event Patterns > @turbot/aws-batch

Removed

AWS > Turbot > Event Handlers > Events > Rules > Event Sources > @turbot/aws-batch

Action Types

AWS > Batch > Compute Environment > Delete from AWS
AWS > Batch > Compute Environment > Set Tags
AWS > Batch > Compute Environment > Skip alarm for Active control
AWS > Batch > Compute Environment > Skip alarm for Active control [90 days]
AWS > Batch > Compute Environment > Skip alarm for Approved control
AWS > Batch > Compute Environment > Skip alarm for Approved control [90 days]
AWS > Batch > Compute Environment > Skip alarm for Tags control
AWS > Batch > Compute Environment > Skip alarm for Tags control [90 days]
AWS > Batch > Job Definition > Delete from AWS
AWS > Batch > Job Definition > Skip alarm for Active control
AWS > Batch > Job Definition > Skip alarm for Active control [90 days]
AWS > Batch > Job Definition > Skip alarm for Approved control
AWS > Batch > Job Definition > Skip alarm for Approved control [90 days]
AWS > Batch > Job Queue > Delete from AWS
AWS > Batch > Job Queue > Set Tags
AWS > Batch > Job Queue > Skip alarm for Active control
AWS > Batch > Job Queue > Skip alarm for Active control [90 days]
AWS > Batch > Job Queue > Skip alarm for Approved control
AWS > Batch > Job Queue > Skip alarm for Approved control [90 days]
AWS > Batch > Job Queue > Skip alarm for Tags control
AWS > Batch > Job Queue > Skip alarm for Tags control [90 days]

5.4.0 (2021-12-13)

Resource Types

AWS > Batch > Compute Environment
AWS > Batch > Job Queue

Control Types

AWS > Batch > Compute Environment > Active
AWS > Batch > Compute Environment > Approved
AWS > Batch > Compute Environment > CMDB
AWS > Batch > Compute Environment > Discovery
AWS > Batch > Compute Environment > Tags
AWS > Batch > Compute Environment > Usage
AWS > Batch > Job Queue > Active
AWS > Batch > Job Queue > Approved
AWS > Batch > Job Queue > CMDB
AWS > Batch > Job Queue > Discovery
AWS > Batch > Job Queue > Tags
AWS > Batch > Job Queue > Usage

Policy Types

AWS > Batch > Compute Environment > Active
AWS > Batch > Compute Environment > Active > Age
AWS > Batch > Compute Environment > Active > Last Modified
AWS > Batch > Compute Environment > Approved
AWS > Batch > Compute Environment > Approved > Regions
AWS > Batch > Compute Environment > Approved > Usage
AWS > Batch > Compute Environment > CMDB
AWS > Batch > Compute Environment > Regions
AWS > Batch > Compute Environment > Tags
AWS > Batch > Compute Environment > Tags > Template
AWS > Batch > Compute Environment > Usage
AWS > Batch > Compute Environment > Usage > Limit
AWS > Batch > Job Queue > Active
AWS > Batch > Job Queue > Active > Age
AWS > Batch > Job Queue > Active > Last Modified
AWS > Batch > Job Queue > Approved
AWS > Batch > Job Queue > Approved > Regions
AWS > Batch > Job Queue > Approved > Usage
AWS > Batch > Job Queue > CMDB
AWS > Batch > Job Queue > Regions
AWS > Batch > Job Queue > Tags
AWS > Batch > Job Queue > Tags > Template
AWS > Batch > Job Queue > Usage
AWS > Batch > Job Queue > Usage > Limit

Action Types

AWS > Batch > Compute Environment > Delete
AWS > Batch > Compute Environment > Router
AWS > Batch > Compute Environment > Update Tags
AWS > Batch > Job Queue > Delete
AWS > Batch > Job Queue > Router
AWS > Batch > Job Queue > Update Tags

5.3.0 (2021-06-24)

What's new?

AWS/Batch/Operator now includes tagging permissions.

5.2.2 (2020-12-14)

Bug fixes

Controls run faster now when in the tbd and skipped states thanks to the new Guardrails Precheck feature (not to be confused with TSA PreCheck). With Guardrails Precheck, controls avoid running GraphQL input queries when in tbd and skipped, resulting in faster and lighter control runs.

5.2.1 (2020-09-18)

Bug fixes

We've made some improvements to our real-time event handling that reduces the risk of creating resources in CMDB with malformed AKAs. There's no noticeable difference, but things should run more reliably now.

5.2.0 (2020-09-04)

What's new?

We've renamed the service's default regions policy from Regions [Default] to Regions to be consistent with our other regions policies.

Policy Types

Renamed

AWS > Batch > Regions [Default] to AWS > Batch > Regions

5.1.0 (2020-09-04)

What's new?

Discovery controls now have their own control category, CMDB > Discovery, to allow for easier filtering separately from other CMDB controls.

5.0.4 (2020-08-11)

Bug fixes

In various Active controls, we were outputting log messages that did not properly show how many days were left until we'd delete the inactive resources (we were still deleting them after the correct number of days). These log messages have been fixed and now contain the correct number of days.

5.0.3 (2020-07-06)

Bug fixes

Updated various resource configurations to provide better compatibility with AWS China regions.

5.0.2 (2020-06-12)

What's new?

All resource Router actions now run even if Guardrails is outside of its allowed change window. This allows Guardrails to maintain an up-to-date CMDB by handling resource updates at all times. Note that this only affects Guardrails's ability to process resources changes that were made in the cloud provider - enforcement actions are still disabled outside of the change window.

5.0.1 (2020-05-15)

Bug fixes

Links to documentation in the descriptions for several controls and policies were broken. These links have now been fixed.

5.0.0 (2020-04-28)

Resource Types

AWS > Batch
AWS > Batch > Job Definition

Control Types

AWS > Batch > Job Definition > Active
AWS > Batch > Job Definition > Approved
AWS > Batch > Job Definition > CMDB
AWS > Batch > Job Definition > Discovery
AWS > Batch > Job Definition > Usage

Policy Types

AWS > Batch > API Enabled
AWS > Batch > Approved Regions [Default]
AWS > Batch > Enabled
AWS > Batch > Job Definition > Active
AWS > Batch > Job Definition > Active > Age
AWS > Batch > Job Definition > Active > Last Modified
AWS > Batch > Job Definition > Approved
AWS > Batch > Job Definition > Approved > Regions
AWS > Batch > Job Definition > Approved > Usage
AWS > Batch > Job Definition > CMDB
AWS > Batch > Job Definition > Regions
AWS > Batch > Job Definition > Usage
AWS > Batch > Job Definition > Usage > Limit
AWS > Batch > Permissions
AWS > Batch > Permissions > Levels
AWS > Batch > Permissions > Levels > Modifiers
AWS > Batch > Permissions > Lockdown
AWS > Batch > Permissions > Lockdown > API Boundary
AWS > Batch > Regions [Default]
AWS > Batch > Tags Template [Default]
AWS > Turbot > Event Handlers > Events > Rules > Event Sources > @turbot/aws-batch
AWS > Turbot > Permissions > Compiled > API Boundary > @turbot/aws-batch
AWS > Turbot > Permissions > Compiled > Levels > @turbot/aws-batch
AWS > Turbot > Permissions > Compiled > Service Permissions > @turbot/aws-batch

Action Types

AWS > Batch > Job Definition > Delete
AWS > Batch > Job Definition > Router